Propeller Head Forensics

How cool is this?

Posted on: June 19, 2012

Rob Lee and the SANS DFIR Faculty created this handy poster full of forensic exam cheats where you can discover key items to an activity for Microsoft Windows systems for intrusions, intellectual property theft, or common cyber-crimes.  You can find the Windows Artifacts Analysis poster here.

1 Response to "How cool is this?"

Great catch!.. Rob Lee and the Sans folks put out some very nice tools and educational materials. I may look into getting this printed poster size..!! Thanks! Rob

Do you haves something to say?

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Enter your email address to follow this blog and receive notifications of new posts by email.

Join 78 other followers

Past Posts



Get every new post delivered to your Inbox.

Join 78 other followers

%d bloggers like this: