Filesystem Forensics: Your drive has been siezed as evidence!
Filesystem Forensics: Your drive has been siezed as evidence!.
Summary
CarolinaCon talk on filesystem forensics when your drive is seized.
Related talks
BSides Knoxville·37 min
Brandon Wilson
Forensics Impossible: Self-Destructing Thumb Drives.
forensicsforensicimpossible+3
Videos·49 min
Joe Gray
Engineers explore architecture and security mechanisms for Dear Blue Team: Forensics Advice to Supercharge your DFIR capabilities by Joe Gray (@c_3pjoe).
forensicsdfirdear+3
Videos·58 min
Ian Ferguson
Ian Ferguson examines Digital Forensics: Samsung + Regex = Heat.
forensicsdigital-forensicsforensic+2