Updated: Download Sift Workstation

Once booted, open a terminal and run the updater to ensure you have the latest signatures and tools:

Virtualization extensions (VT-x/AMD-V) are disabled in your BIOS. Solution: Reboot your computer, enter BIOS (F2, F10, or Del), find "Intel Virtualization Technology," and set it to Enabled . download sift workstation

If you already have a running Ubuntu 22.04 system, you can use the SIFT-CLI (command-line interface) to install the entire toolkit. Once booted, open a terminal and run the

Don't just download it—use it. Practice carving deleted files from an image, analyzing Windows event logs, and scanning memory for malicious processes. SIFT Workstation is the standard for a reason: it turns a standard computer into a professional forensic laboratory in minutes. Don't just download it—use it

SANS Investigative Forensics Toolkit (SIFT) Workstation is a free, open-source Ubuntu-based distribution pre-configured with a suite of digital forensics and incident response (DFIR) tools. Created by Rob Lee for the SANS Institute