Friday, October 5, 2018

Daily Blog #498: Forensic Lunch 10/5/18

Hello Reader,
           We had a Forensic Lunch today! Matthew and I talked with all of you about:


  • The state of the DFIR Conference circuits with what we are told is the end of Enfuse. (Enfuse is being moved into the Opentext Conference from what we've been told). 
  • What other DFIR Conferences exist
  • The idea of going on a cruise together and doing DFIR stuff
  • And matthew demoed his /$Extend/$OBJID:$O Parsing script which is available on Github here: https://gist.github.com/forensicmatt/5d06acb11986c02cb61e9599fe9625f9
  • We talked about recovering deleted ObjectIDs from the $OBJID Index allocation
  • We talked about use cases for ObjectID analysis
You can watch the video here:

No comments:

Post a Comment