---
title: "Discussion on \"What I Found Inside a Forensic Disk Image Using Autopsy & Zimmerman Tools\" | Hashnode"
description: "Discussion on \"What I Found Inside a Forensic Disk Image Using Autopsy & Zimmerman Tools\". Step-by-step DFIR analysis of the 2020JimmyWilson.E01 disk image using Autopsy & Zimmerman tools to uncover insider exfiltration and chain of custody"
url: "https://hashnode.com/posts/what-i-found-inside-a-forensic-disk-image-using-autopsy-zimmerman-tools/6ad401f3be7216ec405532f5"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [What I Found Inside a Forensic Disk Image Using Autopsy & Zimmerman Tools](https://iameskor.hashnode.dev/what-i-found-inside-a-forensic-disk-image-using-autopsy-zimmerman-tools?utm_source=hashnode&utm_medium=feed)

Step-by-step DFIR analysis of the 2020JimmyWilson.E01 disk image using Autopsy & Zimmerman tools to uncover insider exfiltration and chain of custody

Oct 17 · 3 min read · iameskor.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#engineering](https://hashnode.com/tag/engineering)
-   [#securityengineering](https://hashnode.com/tag/securityengineering)
-   [#digitalforensic](https://hashnode.com/tag/digitalforensic)
-   [#incident-response](https://hashnode.com/tag/incident-response)
-   [#blueteam](https://hashnode.com/tag/blueteam)

## Written by

[victor nkereuwem](https://hashnode.com/@iameskor)

@iameskor · Uyo, Nigeria

  
[View profile](https://hashnode.com/@iameskor)

Security Engineer

Security Engineer (in practice) | DFIR · Cloud Security · AWS | Researcher | Google Cybersecurity Cert | Open to remote roles

## Responses

Markdown supported · ⌘↵ to post

No responses yet.