Now displaying: December, 2016
Dec 27, 2016
This week I talk DMA (direct memory access) exploits as a technique to bypass passwords of a live system to conduct imaging - with legal authority of course.
Dec 20, 2016
This week I talk about a useful automated file intelligence resource for dead box exam as well as IR investigations.
Dec 13, 2016
This week I go over survival tips for imaging a Mac.
Dec 6, 2016
This week I about the format change for Windows 10 Prefetch files as well as a freely available tool to decompress and present .pf file data.