Collaborate Disseminate
IWS has been out for a short while now, and there have been a couple of reviews posted. So far, it seems that there is some reticence to the book, based on the form factor (size), as well as the price point. Thanks to feedback on the book o… Continue reading More Regarding IWS
Book DiscountWhile I was attending OSDFCon, I had a chance to (finally!) meet and speak with Jessica Hyde, a very smart and knowledgeable person, former Marine, and an all-around very nice lady. As part of the conversation, she shared with me som… Continue reading Updates
This past week I attended the 9th OSDFCon…not my 9th, as I haven’t been able to make all of them. In fact, I haven’t been able to make it for a couple of years. However, this return trip did not disappoint. I’ve always really enjoye… Continue reading OSDFCon Trip Report
IWSFolks have started receiving the copies of IWS they ordered, and folks like Joey and Mary Ellen have already posted reviews! Mary Ellen has also gone so far as to post her review the Amazon page for the book!Some have also pointed out that the… Continue reading Updates
The written first review of IWS comes from Joey Victorino, a consultant with the IBM X-Force IRIS team. Joey sent me his review via LinkedIn, and graciously allowed me to post it here. Here are Joey’s thoughts on the book, in his own words:… Continue reading First Review of IWS
With the release of my latest book, Investigating Windows Systems, I thought that now would be a good time to revisit the topic of writing books. It occurred to me watching some of the activity and comments on social media that there were likely … Continue reading Book Writing
My latest book, Investigating Windows Systems (Amazon, Elsevier) is out, and it seems that some have already received their ordered copies. Very cool. For anyone who’s ordered a copy, I thank you and I hope you find some value in it.I’ve bl… Continue reading IWS is out!
I’ve wanted to update lfle.pl for sometime, and with the rain this weekend, Saturday morning was the perfect time do so. For those who may not be aware, lfle.pl is a script I have for extracting WinXP/2003 style Event Log records from unstructure… Continue reading A lil Saturday morning computer programming
I decided to put this post together because some things just need to persist beyond the typical Twitter life cycle. The focus here is free and open source tools that can be used on Windows to investigate/parse/enable analysis of Windows artifacts… Continue reading Random Stuff
As a follow-on to my previous post, I wanted to provide a concise summary or overview of the processes for accessing VSCs.First, a couple of important factors regarding this exercise:The goal of this exercise was to identify and validate processes for … Continue reading Accessing Volume Shadows, re-revisited