4n6ir.com
Forensic Incident Response
Windows Prefetch: Tech Details of New Research in Section A & B
by James Habben on March 28, 2017
Windows Prefetch: Overview of New Research in Sections A & B
by James Habben on March 26, 2017
BsidesSLC Experience and Offer to Help
by James Habben on March 17, 2017
CCM_RecentlyUsedApps Properties Forensics
by James Habben on March 14, 2017
Secret Archives of Execution Evidence: CCM_RecentlyUsedApps
by James Habben on February 28, 2017
BSides Los Angeles - Experience and Slides
by James Habben on November 02, 2016
Windows Elevated Programs with Mapped Network Drives
by James Habben on October 11, 2016
GUIs are Hard - Python to the Rescue - Part 1
by James Habben on August 03, 2016