Presentations

Slides and notes from every meeting night, newest first.

Fall 2026

Timeline Forensics with TimeSketch

Colin Yeager · timeline, timesketch, windows

Why timelines matter, how we can use them to build context within an investigation, and how they can be used as a collaborative tool.

Intro to Memory Forensics with Volatility 3

Your name here · memory, volatility, windows

Why RAM matters in an investigation, how to capture it, and a first pass through a Windows memory image with Volatility 3.