Distributed Evidence Collection and Analysis with Velociraptor - SANS DFIR Summit 2019
Distributed Evidence Collection and Analysis with Velociraptor: Fast, Surgical, at Scale...and Free!
Having the ability to rapidly collect and examine artifacts across a network is a game changer for ...
Having the ability to rapidly collect and examine artifacts across a network is a game changer for ...
Distributed Evidence Collection and Analysis with Velociraptor: Fast,...
Emails on a cloud email server are often just as vulnerable to...
The AmCache is an artifact that stores metadata related to PE execution...
Up until August 2013, a complete Windows memory analysis only required...
In this presentation, we will share how the Verizon Media Paranoids use...
Vehicle forensics is still a niche investigative area. It can be...
Wouldn’t it be nice if there were a Windows shellbags equivalent for...
There are many reasons to write forensics tools, from making it open...
Jumping almost blindly into a compromised network can be challenging...
More Information: http://www.sans.org/u/QEc
Summit Dates: July...
The macOS Spotlight desktop search system contains an index of metadata...