forensics online

gistfile1.py

http://forensic-proof.com/archives/category/fundamentals
http://computer-forensics.sans.org/training/course/windows-memory-forensics-in-depth
http://forensicinsight.org/
http://forensicinsight.org/tools

时间轴整合分析（综合时间轴分析）：
http://forensic-proof.com/archives/2323

时间信息表示（时间则表达式）:
http://forensic-proof.com/archives/617

云服务跟踪 - 云间谍：
http://forensic-proof.com/archives/3584

图形文件的签名:
http://forensic-proof.com/archives/323

通用文件签名:
http://forensic-proof.com/archives/300

http://www.wiresharkbook.com/

挑战：
http://www.honeynet.org/challenges
http://forensicscontest.com/
http://www.dfrws.org/2013/challenge/

http://www.dfrws.org/hashchallenge/index.shtml

http://forensic-proof.com/archives/category/data-forensics