The 10th annual SANS Digital Forensics & Incident Response (DFIR) Summit was held at the end of June. This is the most comprehensive DFIR event of the year, brought together by the influential group of experts, quality training, and industry networking opportunities in one place. Every year, professionals from around the world attend the SANS DFIR Summit to learn how to overcome their latest obstacles, share methods and strategies proven effective in their investigations, and learn from the top DFIR practitioners in the industry.
Nicole Ibrahim was invited to speak at the DFIR 2017 summit in Austin. In this presentation, Nicole Ibrahim considers:
• Introduction to FSEvents
• Parsing FSEvents
• Interesting artifacts
• Caveats
Her presentation slides are available for download.
More.
