I was lucky enough to be able to teach at the SANS DFIR Summit in Prague this October as well as attend the Summit. I presented a SANS 360 presentation (it was more like a SANS 600!) on OS X Spotlight Queries.
Find it here.
Other Summit presentations are available here under the heading 'DFIR Prague Summit 2015'
I will now be posting my presentations, HFS+ Resources, and other things (scripts to come!) on Github. I have turned off the Google Drive shared folder so be sure to update your links!
These links will also be available off of the Resources page.
The latest version of this presentation is available in the Resources section of this website.
Enjoy!
Click here for the newest presentation slides from CEIC 2015.
I hope I'll be seeing some of you bright and early at the 9am presentation!
Heather Mahalik and I had the pleasure of presenting a quick rundown of what we found in iOS backups for the brand spankin' new Apple Watches that we just got. (BTW - Yes, I'm loving it. Big surprise there!)
We presented this last week as SANS Security West. Keep an eye out for more information, there was quite a bit that we were not able to cover in our 18 minute lightning talk.
