Here it is. The presentation I was due to give at the SANS EU Forensic Summit. Hope you find it useful. Bare in mind you’ll have to have iTunes or Quicktime installed to watch this. I’ll work on getting it into other formats later. Enjoy!
A brand new episode for your listening pleasure.
Lee Whitfield gives insight into Microsoft Volume Shadow Copies and shows how to extract meaningful data by manually deconstructing these files.
We’re coming back!
We have a new URL shortening service
I appeared on the recent Sans webcast about computer forensics
