What I Found Inside a Forensic Disk Image Using Autopsy & Zimmerman Tools

When investigating an active security breach or insider threat, a disk image is a digital crime scene frozen in time. During my DFIR and Security Engineering sprint, I analyzed a practice disk image (