International Scientific Journals
of Scientific Technical Union of Mechanical Engineering "Industry 4.0"

This paper presents the application of Python in computer forensics, proposing various approaches for file system analysis, memory forensics, network monitoring, and malware detection. It examines Python’s integration with forensic tools such as Autopsy, The Sleuth Kit (TSK), Volatility, and Scapy, highlighting its role in automating forensic investigations and enhancing efficiency. The research discusses the advantages of Python in forensic analysis, emphasizing its role in forensic automation, script-based evidence collection, and rapid data processing within various case studies.

This paper discusses key challenges and methods in computer forensics and presents a comparative analysis of forensic software tools FTK, Autopsy, The Sleuth Kit TSK, TestDisk and Foremost. The instruments considered in the study are applied in different case studies to collect, analyze and preserve digital evidence available for computer forensics, cybersecurity and cloud-based investigations. The research discusses their effectiveness and limitations in handling cloud-based evidence collection.