• Presentation – Into the Shadows

    Posted on April 20, 2010 by Lee Whitfield in Podcast Episodes.

    Here it is. The presentation I was due to give at the SANS EU Forensic Summit. Hope you find it useful.

    Bare in mind you’ll have to have iTunes or Quicktime installed to watch this. I’ll work on getting it into other formats later.

    Enjoy!

3 Responsesso far.

  1. Ken Pryor says:

    Outstanding presentation, Lee! I enjoyed it very much and will most likely watch it again. Good stuff!
    KP

  2. Charles Windhausen says:

    FYI, Lee, the index block header you list as 6B87083876C1484EB7AE04046E6CC7520100 is actually the now familiar guid {3808876b-c176-4e48-b7ae-04046e6cc752} followed by the WORD value 0×0001. Thanks for the presentation.

  3. Lee Whitfield says:

    Thanks Charles, someone had already pointed this out to me on one of the list-servs. When they told me I face-palmed. How could I miss that? I’d already done all the difficult stuff. Oh well, you live and learn I guess.
    If anyone has anything to add please let me know, I do not proclaim myself to be the most knowledgeable on the subject and would welcome any input.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>