- NIST Computer Security Incident Handling Guide (800-61r2)
- Interfacing with Law Enforcement
- Incident Handling Forms
- Jai Minton's DFIR Cheat Sheet
- SANS Hacker Tools, Techniques, Exploits, and Incident Handling (SEC504)
- Google Rapid Response (GRR)
- Meerkat
- log2timeline & Plaso
- Timesketch
- Autopsy
- apfs-fuse