Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
26<br />
Windows Event Log<br />
Success<br />
Logs Rolled<br />
Had 2 Weeks of Logs<br />
Retrieved Over 3 Million<br />
<strong>Record</strong>s From Unallocated<br />
© Copyright 2012<br />
Did <strong>not</strong> find the smoking<br />
gun