Mastering the Super Timeline With log2timeline

Traditional timeline analysis can be extremely useful yet it sometimes misses important events that are stored inside files or OS artifacts on the suspect. By solely depending on traditional filesystem timeline the investigator misses context that is necessary to get a complete and accurate...
By
Kristinn Guðjónsson
August 25, 2010

All papers are copyrighted. No re-posting of papers is permitted

470x382_Generic_Whitepaper.jpg