GMU2005 presentatio...
 
Notifications
Clear all

GMU2005 presentations posted

6 Posts
5 Users
0 Likes
362 Views
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

All,

I've posted my GMU2005 presentations

http//www.windows-ir.com/Carvey_gmu2005.zip

H. Carvey
"Windows Forensics and Incident Recovery"
http//www.windows-ir.com
http//windowsir.blogspot.com

 
Posted : 12/08/2005 3:56 pm
nickfx
(@nickfx)
Posts: 131
Estimable Member
 

Really good work, especially liked the work on the Event Logs, I'll have a play with your findings.

Thanks for sharing with the community.

Nick

 
Posted : 12/08/2005 5:40 pm
andy1500mac
(@andy1500mac)
Posts: 79
Trusted Member
 

Ditto…

I'm partial to the usb information and can see it especially useful with the proliferation of (as you mentined) ipods….

The event viewer findings I will also play with but on one of my "clearer headed" days.

Thanks.

Andrew-

 
Posted : 13/08/2005 4:51 am
schlecht
(@schlecht)
Posts: 46
Eminent Member
 

Good stuff! Thanks for sharing.

 
Posted : 13/08/2005 6:29 pm
arashiryu
(@arashiryu)
Posts: 122
Estimable Member
 

Excellent work.

 
Posted : 15/08/2005 6:55 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
Topic starter
 

All,

Thanks for your comments.

I've updated the archive…click on the link in my first post…to include another presentation I got to give, plus some Perl scripts mentioned in the presentations.

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
http//www.windows-ir.com
http//windowsir.blogspot.com

 
Posted : 16/08/2005 3:35 am
Share: