In this project, I undertook a comprehensive investigation of a cybersecurity incident to identify its scope, and impact. Leveraging a range of cutting-edge tools and techniques, I meticulously analyzed memory dumps, network data, and disk images from both a compromised domain controller and a user's workstation. The objective was to unravel the incident's origin, extent, and potential points of compromise, ultimately culminating in the creation of a detailed incident response report.

Investigation Process:
By using tools such as Autopsy, Volatility, Wireshark, cyberchef, etc. I systematically examined the digital artifacts, meticulously reconstructing the timeline of events. The analysis included the identification of malicious processes, unauthorized access attempts, and network traffic anomalies.

Incident Response Report:
Based on the findings gathered from memory, autorun, network data, and disk image analysis, I compiled a comprehensive incident response report. The report included detailed information about the incident's, impact assessment, and recommended remediation measures. The insights provided a clear roadmap for containing the incident, and enhancing security posture to prevent future breaches.