Heather Mahalik and Sarah Edwards shared their fresh presentation from SANS DFIR Summit on extracting forensic artifacts from Apple Continuity. You can find the slides here.
-
Recover Deleted Records in Windows.edb with WinSearchDBAnalyzer
WinSearchDBAnalyzer by Jeonghyeon Kim can parse normal records and recover deleted records… -
Visual Analysis with ProcDOT
In the new episode of “Introduction to Malware Analysis” series Richard Davis … -
Amcache Forensics: Populated or Not?
New Sunday – new Funday! This week’s Sunday Funday presented the following cha…
Load More Related Articles
-
Threat Hunting Using Live Box Forensics
In a threat landscape characterized by targeted attacks, fileless malware, and other advan… -
Uncovering and Visualizing Malicious Infrastructure
How much information about a threat can you find using a single IP address, domain name, o… -
Cyber Threat Intelligence Summit & Training 2019: Presentations
Presentations from Cyber Threat Intelligence Summit & Training 2019 are already availa…
Load More In Presentations