Memory Forensics with Volatility 2 & 3
A complete memory forensics guide: Volatility 2 vs Volatility 3 and when to use each, installation, acquisition, and a full Windows investigation workflow with side-by-side commands for processes, network, injection, files, registry, credentials, timelines, and Linux memory.
Steganography for CTFs & Forensics
A practical steganography guide: a repeatable methodology, then images (PNG/JPEG/GIF/BMP), audio (spectrograms, LSB, DTMF, SSTV), text and whitespace, documents, and password attacks, with the real commands and small Python scripts for each technique.