| FOR508-USB/SIFT-Lab-Install/SIFT/SIFT 3 - FOR508.zip | 17.23 GB |
| FOR508-USB-B/win2008R2-controller-10.3.58.4/win2008R2-controller-c-drive/win2008R2-controller-c-drive.E01 | 13.37 GB |
| FOR508-USB-B/win7-64-nfury-10.3.58.6/win7-64-nfury-c-drive/win7-64-nfury-c-drive.E01 | 11.21 GB |
| FOR508-USB/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-c-drive/win7-32-nromanoff-c-drive.E01 | 9.02 GB |
| FOR508-USB-B/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-c-drive/win7-32-nromanoff-c-drive.E01 | 9.02 GB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-c-drive/xp-tdungan-c-drive.E01 | 6.55 GB |
| FOR508-USB-B/win2008R2-controller-10.3.58.4/win2008R2-controller-memory/win2008R2-controller-memory-raw.001 | 2.5 GB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-memory/xp-tdungan-memory-raw.001 | 2 GB |
| FOR508-USB-B/win7-64-nfury-10.3.58.6/win7-64-nfury-memory/win7-64-nfury-memory-raw.001 | 2 GB |
| FOR508-USB/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-memory/win7-32-nromanoff-memory-raw.001 | 2 GB |
| FOR508-USB-B/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-memory/win7-32-nromanoff-memory-raw.001 | 2 GB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-memory/baseline-memory/XPSP3x86-baseline.img | 2 GB |
| FOR508-USB/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-memory/baseline-memory/Win7SP1x86-baseline.img | 2 GB |
| FOR508-USB-B/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-memory/baseline-memory/Win7SP1x86-baseline.img | 2 GB |
| FOR508-USB/example-memory-images/xp_tdungan_live_audit.mans | 681.92 MB |
| FOR508-USB/SIFT-Lab-Install/VMware/VMware-workstation-full-10.0.4-2249910.exe | 491.13 MB |
| FOR508-USB-B/win2008R2-controller-10.3.58.4/win2008R2-controller-memory/win2008DC-Memory.mans | 433.72 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-incident-response/xp-tdungan-Redline-Live-Audit/mir.w32processes-memory.60040847.xml | 403.54 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-c-drive/precooked/bulk-extractor/bulk-extractor-output.zip | 300.58 MB |
| FOR508-USB/example-memory-images/storm_worm.mans | 281.6 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-incident-response/xp-tdungan-Redline-Live-Audit/mir.w32apifiles.111f277c.xml | 251.35 MB |
| FOR508-USB/example-memory-images/nromanoff.mans | 232.94 MB |
| FOR508-USB/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-c-drive/precooked/redline/nromanoff.mans | 232.94 MB |
| FOR508-USB-B/win7-32-nromanoff-10.3.58.5/win7-32-nromanoff-c-drive/precooked/redline/nromanoff.mans | 232.94 MB |
| FOR508-USB/SIFT-Lab-Install/Windows Tools/FOR408-Tools.zip | 231.61 MB |
| FOR508-USB/SIFT-Lab-Install/IOC Editor/DOTNET/dotnetfx35_FULL.exe | 231.5 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-incident-response/xp-tdungan-Redline-Live-Audit/mir.w32registryapi.727d315d.xml | 229.8 MB |
| FOR508-USB/SIFT-Lab-Install/DATA-FOR-FINAL-DAY.zip | 213.45 MB |
| FOR508-USB/example-memory-images/sobig.zip | 169.18 MB |
| FOR508-USB/example-memory-images/stuxnet.zip | 167.73 MB |
| FOR508-USB/example-memory-images/APT.zip | 166.72 MB |
| 508.3-4.1.pdf | 148.72 MB |
| 508.2.1.pdf | 128.77 MB |
| 508.workbook.3.pdf | 128.27 MB |
| 508.3-4.2.pdf | 127.24 MB |
| FOR508-USB/example-memory-images/conficker.zip | 122.03 MB |
| 508.1.pdf | 109.92 MB |
| 508.5.1.pdf | 108.04 MB |
| FOR508-USB-B/win7-64-nfury-10.3.58.6/win7-64-nfury-memory/win7-nfury-memory.mans | 103.7 MB |
| 508.workbook.2.pdf | 101.7 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-c-drive/precooked/timeline/xp-tdungan-plaso.dump | 96.06 MB |
| FOR508-USB/SIFT-Lab-Install/VMware/VMware-player-6.0.3-1895310.exe | 94.32 MB |
| 508.5.2.pdf | 93.67 MB |
| FOR508-USB/example-memory-images/xp_tdungan.mans | 89.43 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-memory/xp_tdungan.mans | 89.43 MB |
| FOR508-USB/example-memory-images/TDSS.zip | 89 MB |
| 508.workbook.1.pdf | 87.42 MB |
| FOR508-USB-B/xp-tdungan-10.3.58.7/xp-tdungan-c-drive/precooked/redline/xp_tdungan.mans | 87.06 MB |
| FOR508-USB/example-memory-images/storm_worm.zip | 70.53 MB |
| 508.2.2.pdf | 70.21 MB |