Mind maps / Forensics Practice Lab
Forensics Practice Lab mind map
A mind map of forensics challenges, CTFs and sample evidence images. Free to use and share. Open the image at full size, or print it at A3.
Reference
Links from the map
These are the sources and tools referenced in the Forensics Practice Lab mind map. Links marked offline pointed to projects that have since shut down or moved, so they are kept as text only.
Host Forensics
| Computer Forensic Investigation | shortinfosec.net/2008/07/competition-computer-forensic.html |
|---|---|
| Digital Forensics Tool Testing Images | dftt.sourceforge.net |
| DigitalCorpora | digitalcorpora.org |
| DFRWS 2014 Forensics Rodeo | cs.uno.edu/~golden/dfrws-2014-rodeo.htmloffline |
| ForGe Forensic test image generator | github.com/hannuvisti/forge |
| ISFCE Sample Practical Exercise | isfce.com/sample-pe.htmoffline |
| Linux LEO Supplemental Files | linuxleo.com |
| NIST CFREDS | cfreds.nist.gov/dfr-test-images.html cfreds.nist.gov/Hacking_Case.html |
| p0wnlabs Sample Challenges | p0wnlabs.com/free/forensics |
| Samples from Automating DFIR Series | hecfblog.com/2015/02/automating-dfir-how-to-series-on.html |
| volatility memory samples | code.google.com/p/volatility/wiki/FAQ |
Network Forensics
Malware Analysis
| Contagio | contagiodump.blogspot.com |
|---|---|
| FakeAVs blog | fakeavs.comoffline |
| malc0de | malc0de.com/databaseoffline |
| MalShare | malshare.com |
| Open Malware / Offensive Computing | openmalware.org |
| theZoo / Malware DB | thezoo.morirt.com |
| VirusShare.com / VXShare | virusshare.com |
| Virusign | virusign.com |
| VX Heaven | vxheaven.orgoffline |
| VXVault | vxvault.siri-urz.net |
| Georgia Tech malrec Page | panda.gtisc.gatech.edu/malrec |
| Malware Traffic | malware-traffic-analysis.net |
| Kernelmode Forum | kernelmode.info |
| Malware Hub Forum | malwaretips.com/categories/malware-hub.103 |
| Public Documents about APTs | github.com/kbandla/APTnotes |
| CLEAN MX realtime database | support.clean-mx.de/clean-mx/viruses.phpoffline |
| Joxean Koret's List | malwareurls.joxeankoret.com |
| MalwareBlacklist.com | malwareblacklist.comoffline |
| Sucuri Research Labs | labs.sucuri.net/?malware |
| Android Sandbox | androidsandbox.net/samplesoffline |
| Contagio Mobile Malware | contagiominidump.blogspot.com |
| HoneyDrive | bruteforce.gr/honeydrive |
| maltrieve | maltrieve.orgoffline |
Online and CTFs
| Black T-Shirt Cyber Forensics Challenge | cyberforensicschallenge.comoffline |
|---|---|
| DEFCON CTF Archive | defcon.org/html/links/dc-ctf.html |
| DFRWS | dfrws.org/2013/challenge/index.shtmloffline dfrws.org/2010/challengeoffline dfrws.org/2011/challenge/index.shtmloffline dfrws.org/2007/challenge/index.shtmloffline dfrws.org/2006/challengeoffline dfrws.org/2005/challengeoffline |
| Digital Forensics Security Treasure Hunt | digitalforensics.securitytreasurehunt.comoffline |
| ENISA CERT Training Material | enisa.europa.eu/activities/cert/support/exerciseoffline |
| ForensicKB Practicals | forensickb.com/2008/01/forensic-practical.html forensickb.com/2008/01/forensic-practical-2.html forensickb.com/2010/01/forensic-practical-exercise-3.html forensickb.com/2010/06/forensic-practical-exercise-4.html forensickb.com/2011/01/simple-forensic-puzzle-1.html forensickb.com/2011/02/forensic-puzzle-6.html |
| HackEire CTF | github.com/markofu/hackeire |
| Honeynet Challenges | honeynet.org/challenges old.honeynet.org/scans/index.html |
| Jack Crook's DFIR Challenges | docs.google.com/file/d/0B_xsNYzneAhEN2I5ZXpTdW9VMGM |
| I Smell Packets | ismellpackets.com |
| Network Forensics Puzzle Contest | forensicscontest.com/puzzles |
| RingZer0 Team | ringzer0team.com/challengesoffline |
| UMass Trace Repository | traces.cs.umass.edu |
