Hello Reader,
We had a Forensic Lunch today! Matthew and I talked with all of you about:
- The state of the DFIR Conference circuits with what we are told is the end of Enfuse. (Enfuse is being moved into the Opentext Conference from what we've been told).
- What other DFIR Conferences exist
- The idea of going on a cruise together and doing DFIR stuff
- And matthew demoed his /$Extend/$OBJID:$O Parsing script which is available on Github here: https://gist.github.com/forensicmatt/5d06acb11986c02cb61e9599fe9625f9
- We talked about recovering deleted ObjectIDs from the $OBJID Index allocation
- We talked about use cases for ObjectID analysis
You can watch the video here:
Also Read: Daily Blog #497
Post a Comment