Low level events • Low level timelines • High level events ... - DFRWS
Low level events • Low level timelines • High level events ... - DFRWS
Low level events • Low level timelines • High level events ... - DFRWS
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Evaluation (1)<br />
<strong>•</strong> Demonstrated as a feasible approach<br />
<strong>•</strong> Provenance can be preserved<br />
<strong>•</strong> Performance-wise ok, and can be improved<br />
<strong>•</strong> Implementation:<br />
<strong>•</strong> Gaps in extractor scope (notably evtx)<br />
<strong>•</strong> Supporting and contradictory should be<br />
automatically added<br />
<strong>•</strong> Analyser scripts need some simplification
Change language