Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
Carve for Record not Files - SANS Computer Forensics
SHOW LESS
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
8<br />
Traditional File Carving<br />
Tools and Techniques<br />
NOT AS EFFECTIVE FILE TYPES<br />
Event Logs<br />
Linux Last Logs<br />
Web Logs<br />
Shell Histories<br />
Tracking Cookies<br />
© Copyright 2012<br />
EVT(x)<br />
WTMP<br />
LOG<br />
.history<br />
TXT or SQL
Change language