The Forensic Lunch!
The one hour, mostly, videocast/podcast all about DFIR.
This weeks guests:
Maxime Lamothe-Brassard of Refraction Point talking about his project Lima Charlie https://github.com/refractionPOINT/li...
Ryan Nolette, Security Operations Lead at Carbon Black, talking about all of the ransomware variants he's been seeing and how shadow copies are affected
Us talking about how different tools deal with shadow copies and accessing deleted shadow copies
It's the forensic lunch!
This broadcast James and I go through the results of our testing of different file carving tools:
X-Ways Forensics
Bulk Extractor
Blade
Blackbag Blacklight