Derek reflects on a recent table-top exercise to verify our processes, discover gaps, and learn from our mistakes. A shopping cart is involved.
Derek started with ideas on creating a compact and flexible go-bag. He ended up writing about write blockers.
Derek completed the SANS FOR509 4-day course. He liked it.
Derek explores a beta release of X-Ways Forensics 20.6 that introduces an auto-resume feature.
Derek explores XWF's functionality to review and report on Internet browser activity.
Derek rick and rolls with XWF's optical character recognition (OCR) capability.
Derek reflects on how XWF influenced his growth in digital forensics.
Derek briefly describes training options available for XWF.
I read the manual to understand that encrypted file contents and names in 7Z archives are not currently supported in XWF. XWF is capable of using an associated program to manually review these archives.
Using report table associations to totally exclude selected items from a XWF volume snapshot.