These Artifacts Aren't Fiction

These Artifacts Aren't Fiction

via YouTube Direct link

Intro

1 of 29

1 of 29

Intro

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

These Artifacts Aren't Fiction

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Introducing: Matt Scheurer
  3. 3 Data Preservation Methodology
  4. 4 The Windows SRUM Database
  5. 5 Useful SRUM Data
  6. 6 Network Resource Usage
  7. 7 SRUM Database Conclusions
  8. 8 Web Browser Artifacts
  9. 9 Investigation Tooling
  10. 10 Artifact Sources
  11. 11 Memory Dumps
  12. 12 Example History Artifact Paths
  13. 13 History Parsed Example 4/4
  14. 14 Download Parsed Example 1/2
  15. 15 PowerShell Artifacts Collection
  16. 16 Objectives
  17. 17 Warning!
  18. 18 PowerShell Logging
  19. 19 PowerShell Version
  20. 20 PowerShell Pro Tip!
  21. 21 System Time
  22. 22 Hashing Files
  23. 23 Less Volatile Network Artifacts
  24. 24 Execution Policy Settings
  25. 25 Clipboard, Auto-runs, and Tasks
  26. 26 Host Details
  27. 27 The Open Files Conundrum
  28. 28 More PowerShell Tips & Tricks
  29. 29 Thank you for attending!

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.