Daily Blog #498: Forensic Lunch 10/5/18 - Discussion on DFIR Conference Circuits and More

Discussion on DFIR Conference Circuits and More  by David Cowen - Hacking Exposed Computer Forensics Blog

Hello Reader,

           We had a Forensic Lunch today! Matthew and I talked with all of you about:

  • The state of the DFIR Conference circuits with what we are told is the end of Enfuse. (Enfuse is being moved into the Opentext Conference from what we've been told). 
  • What other DFIR Conferences exist
  • The idea of going on a cruise together and doing DFIR stuff
  • And matthew demoed his /$Extend/$OBJID:$O Parsing script which is available on Github here: https://gist.github.com/forensicmatt/5d06acb11986c02cb61e9599fe9625f9
  • We talked about recovering deleted ObjectIDs from the $OBJID Index allocation
  • We talked about use cases for ObjectID analysis
You can watch the video here:

Also Read: Daily Blog #497

Post a Comment