2012-08-01から1ヶ月間の記事一覧

[forensic] Windows Registry: Application Compatibility Cache

sec

Windows Registry: Application Compatibility Cache | Forensic Methods

Defcon20Slides

sec

Defcon20Slides directory listing

[forensics] Analysis & Correlation of Mac Logs

sec

http://computer-forensics.sans.org/summit-archives/2012/analysis-and-correlation-of-macintosh-logs.pdf