---
title: "Digital Forensics"
canonical: "https://codeandcypher.com/tags/digital-forensics/"
---

# Digital Forensics



## Index

- [Acuity Health: Part 6 — Digital Forensics & EHR VIP Breach](/series/acuity-health-security-architecture/part-6-digital-forensics-ehr-vip-breach/index.md) (2026-10-13): Acquire volatile memory, maintain cryptographic chain of custody, and correlate SQL transaction logs during a sensitive healthcare breach investigation.

- [Healthcare Incident Response, Computer Network Forensics & Containment](/papers/healthcare-incident-response-and-computer-network-forensics/index.md) (2026-07-20): Digital forensics investigation and chain-of-custody framework analyzing an unauthorized EHR database breach involving VIP patient healthcare records.

- [Forensic Investigation Findings: Incident Reconstruction, Root Cause, and Expert Witness Report](/papers/csol590-presentation-of-findings/index.md) (2026-02-16): Forensic investigation report and expert witness documentation synthesizing digital evidence, chronological timeline reconstruction, and findings.

- [Standard Operating Procedures (SOP) for Digital Forensics and Evidence Handling](/papers/csol590-implementing-standard-operating-procedures-for-handl/index.md) (2026-02-16): Standard operating procedures (SOP) for digital forensics evidence intake, forensic imaging, chain-of-custody tracking, and legal hold compliance.

- [Legal Admissibility of Digital Evidence: Federal Rules of Evidence and Daubert Standards](/papers/csol590-understanding-digital-evidence/index.md) (2026-02-09): Legal admissibility standards for digital evidence under Federal Rules of Evidence, Daubert criteria, and ISO/IEC 27037 forensic guidelines.

- [Mobile Device Forensics: Extraction, Decoding, and SQLite Database Analysis](/papers/csol590-analyze-a-cell-phone-image/index.md) (2026-02-02): Digital forensics analysis of a mobile device image, decoding SQLite databases, call logs, and deleted communication artifacts.

- [Forensic Artifact Analysis Using Autopsy: File System Reconstruction and Timeline Carving](/papers/csol590-examine-the-evidence-using-autopsy/index.md) (2026-01-26): Forensic artifact investigation using Autopsy, examining file system timestamps, deleted inode carving, and keyword index analysis.

- [Digital Forensics: Evidence Acquisition, Chain of Custody, and Volatile Memory Preservation](/papers/csol590-preservation-and-acquisition-of-the-evidence/index.md) (2026-01-19): Digital evidence acquisition and live volatile memory preservation procedures ensuring forensic integrity and cryptographic hash verification.

- [Enterprise Incident Response Plan and RACI Governance Matrix](/papers/csol590-incident-response-plan-responsibility-chart/index.md) (2026-01-12): Incident response governance framework establishing RACI matrices, triage escalation paths, and executive communication protocols.