Invoke-IR
Saturday, March 7, 2015

Parse the MFT in PowerShell

›
[This post has been deprecated.  During the development of PowerForensics, I have decided to move away from the Sleuth Kit naming conventio...
Sunday, April 6, 2014

A 10 Second Journey Presentation

›
2 comments:
Wednesday, March 5, 2014

Windows 8 Prefetch 101

›
In preparation for my presentation on the Windows Prefetch this Friday I made this poster to help understand the Prefetch file structure. ...
‹
›
Home
View web version
Powered by Blogger.