Chain of Custody, Disk Imaging (dd, FTK Imager), File System Forensics (NTFS/FAT), Memory Forensics (Volatility), and Incident Handling lifecycle (NIST SP 800-61).
Upload your Digital Forensics and Incident Response lecture slides to generate spaced repetition study cards in seconds.