Resources

Here’s a list of resources that I’d like to share

DFIR notes

A list of my notes from training classes, videos, whitepapers, other blogs, etc.

• Docker
• Mac Autoruns
• New Service Triage
• Windows Prefetch
• PSEXEC Forensics
• WMI Forensics

Other

• KAPE Presentation - Slides I’ve used in my conference talk about KAPE
• Home Lab Presentation - Slides I’ve used in my conference talk about Home Labs
• SANS Posters - Awesome quick-references. If you can get hard-copies of these, they make great wallpaper in your office. Hint: be sure to pick up two of each, if you want to post front and back on your wall