Digital Forensics on Code and Cypherhttps://codeandcypher.com/tags/digital-forensics/Enterprise cybersecurity research by Joshua A. Wortz, CISSP: Zero Trust, cloud security, DevSecOps, threat defense, and AI-security education.Code and Cypherhttps://codeandcypher.com/images/papermod-cover.pnghttps://codeandcypher.com/Hugoen-usFri, 02 Oct 2026 15:48:11 -0700Acuity Health: Part 6 — Digital Forensics & EHR VIP Breachhttps://codeandcypher.com/series/acuity-health-security-architecture/part-6-digital-forensics-ehr-vip-breach/Tue, 13 Oct 2026 00:00:00 -0700https://codeandcypher.com/series/acuity-health-security-architecture/part-6-digital-forensics-ehr-vip-breach/Acquire volatile memory, maintain cryptographic chain of custody, and correlate SQL transaction logs during a sensitive healthcare breach investigation.Healthcare Incident Response, Computer Network Forensics & Containmenthttps://codeandcypher.com/papers/healthcare-incident-response-and-computer-network-forensics/Mon, 20 Jul 2026 00:00:00 -0700https://codeandcypher.com/papers/healthcare-incident-response-and-computer-network-forensics/Digital forensics investigation and chain-of-custody framework analyzing an unauthorized EHR database breach involving VIP patient healthcare records.Forensic Investigation Findings: Incident Reconstruction, Root Cause, and Expert Witness Reporthttps://codeandcypher.com/papers/csol590-presentation-of-findings/Mon, 16 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-presentation-of-findings/Forensic investigation report and expert witness documentation synthesizing digital evidence, chronological timeline reconstruction, and findings.Standard Operating Procedures (SOP) for Digital Forensics and Evidence Handlinghttps://codeandcypher.com/papers/csol590-implementing-standard-operating-procedures-for-handl/Mon, 16 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-implementing-standard-operating-procedures-for-handl/Standard operating procedures (SOP) for digital forensics evidence intake, forensic imaging, chain-of-custody tracking, and legal hold compliance.Legal Admissibility of Digital Evidence: Federal Rules of Evidence and Daubert Standardshttps://codeandcypher.com/papers/csol590-understanding-digital-evidence/Mon, 09 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-understanding-digital-evidence/Legal admissibility standards for digital evidence under Federal Rules of Evidence, Daubert criteria, and ISO/IEC 27037 forensic guidelines.Mobile Device Forensics: Extraction, Decoding, and SQLite Database Analysishttps://codeandcypher.com/papers/csol590-analyze-a-cell-phone-image/Mon, 02 Feb 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-analyze-a-cell-phone-image/Digital forensics analysis of a mobile device image, decoding SQLite databases, call logs, and deleted communication artifacts.Forensic Artifact Analysis Using Autopsy: File System Reconstruction and Timeline Carvinghttps://codeandcypher.com/papers/csol590-examine-the-evidence-using-autopsy/Mon, 26 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-examine-the-evidence-using-autopsy/Forensic artifact investigation using Autopsy, examining file system timestamps, deleted inode carving, and keyword index analysis.Digital Forensics: Evidence Acquisition, Chain of Custody, and Volatile Memory Preservationhttps://codeandcypher.com/papers/csol590-preservation-and-acquisition-of-the-evidence/Mon, 19 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-preservation-and-acquisition-of-the-evidence/Digital evidence acquisition and live volatile memory preservation procedures ensuring forensic integrity and cryptographic hash verification.Enterprise Incident Response Plan and RACI Governance Matrixhttps://codeandcypher.com/papers/csol590-incident-response-plan-responsibility-chart/Mon, 12 Jan 2026 00:00:00 -0700https://codeandcypher.com/papers/csol590-incident-response-plan-responsibility-chart/Incident response governance framework establishing RACI matrices, triage escalation paths, and executive communication protocols.