Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
SHOW LESS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
2<br />
Introduction Slide<br />
Introductions<br />
Traditional File Carving Tools and Techniques<br />
Definitions<br />
Windows Event Logs<br />
Last Logs<br />
Web Logs<br />
Shell History Logs<br />
Historical IP Address<br />
Resources<br />
Q&A<br />
© Copyright 2012
Change language