Matt Scheurer & Tuan Phan - These Artifacts aren't Fiction — SecureWV

They are using what for Digital Forensics and eDiscovery? The presenters firmly believe in using tried-and-true tools along with generally accepted procedures for evidence collection. Technology itself, attack surfaces, and attack vectors often change over time. This presentation highlights the benefits of adding new approaches for collecting evidence in modern digital forensics and analysis. Topics covered in this presentation include extracting and working with native Windows System Resource Usage Monitor (SRUM) data, Internet web browser artifacts, and beneficial PowerShell commands and cmdlets.