Dan Pullega has published a useful “forensics quickie” in his blog. In the post he shows how to access and copy files out of Volume Shadow Copies (VSCs) from live systems remotely.
-
Spotting the Signs of Lateral Movement
Derek King has published another post as part of his “Hunting with Splunk: The Basic… -
How to Deploy Cuckoo Sandbox
Marc Rivero LĂłpez presented a how-to guide that will help you to deploy Cuckoo Sandbox … -
DFIR SQL Query Repository
Alexis Brignoni has started a collection of SQL query templates for digital forensics use,…
Load More Related Articles
-
Spotting the Signs of Lateral Movement
Derek King has published another post as part of his “Hunting with Splunk: The Basic… -
How to Put a Qualcomm Phone into EDL Mode
In this post Magnet Forensics talks about Emergency Download (EDL). This is a Qualcomm fea… -
Using SQL Server 2016 Temporal Tables for Data Forensics and Auditing
Temporal Tables are a new feature of SQL Server 2016. Join Pragmatic Works to learn what t…
Load More In Tips & Tricks
