Saturday, March 7, 2015
Parse the MFT in PowerShell
›
[This post has been deprecated. During the development of PowerForensics, I have decided to move away from the Sleuth Kit naming conventio...
Sunday, April 6, 2014
A 10 Second Journey Presentation
›
2 comments:
Wednesday, March 5, 2014
Windows 8 Prefetch 101
›
In preparation for my presentation on the Windows Prefetch this Friday I made this poster to help understand the Prefetch file structure. ...
‹
›
Home
View web version