Talks·51 min
Kris Wall
Walks through reconstructing a compromised Windows web server, from disk artifacts and registry data to IIS logs and a web shell.
incident-responsewebwindows+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Talks·51 min
Kris Wall
Walks through reconstructing a compromised Windows web server, from disk artifacts and registry data to IIS logs and a web shell.