As a follow-up to our recently held State of the Hack: Back to the Remediation webinar,...
Read moreAs a follow-up to our recently held State of the Hack: Back to the Remediation webinar,...
Read moreAs a follow-up to our recently held State of the Hack: Back to the Remediation webinar,...
Read moreAs a follow-up to our recently held State of the Hack: Back to the Remediation webinar,...
Read moreIncident Response with NTFS INDX Buffers – Part 4: The Internal Structures of an INDX Attribute
October 16 2012By Jeff Hamm & William Ballenthin On August 30th, 2012, we presented a webinar on how to use INDX buffers to assist in an ...
Read moreIncident Response with NTFS INDX Buffers – Part 3: A Step by Step Guide to Parse INDX
October 10 2012By William Ballenthin & Jeff Hamm Our last post in the Incident Response with NTFS INDX Buffers series detailed the internal...
Read moreIncident Response with NTFS INDX Buffers – Part 2: The Internal Structures of a File Name Attribute
September 26 2012By Jeff Hamm & William Ballenthin Last week on M-Unition, Willi and I published the first post in...
Read more
Recent Comments