Shell items, More than Meets the Eye

Monday, 16 May 2016 1:00PM EDT (16 May 2016 17:00 UTC)
Speaker: David Cowen

It's time to revisit everyone's favorite windows forensic resources; shell items. Whether you like to look at them as lnk files, jumplists, shell bags or registry entries they are everywhere. In recent years and in recent versions of Windows we keep finding more data within shell items we can use to make even more correlations and find more evidence! Tune in to see new research, tools and analysis you can use to take your case farther today.

Digital Forensics & Incident Response Summit
Austin, TX

Summit Dates: June 23-24
Training Course Dates: June 25-30
DFIR NetWars: June 27-28
Register at sans.org/dfirsummit

SANS Annual DFIR Summit is the only event of its kind that gathers the most influential group of experts, the highest quality of training & the greatest opportunities to network with others in the field of Digital Forensics & Incident Response, all in one place! Attend the DFIR Summit and gain the investigative skills you need and the ones you never knew you needed.

Login to Register

Related Content

Following the Trail of Threat Actors in Google Workspace Audit Logs

Digital Forensics, Incident Response & Threat Hunting

Following the Trail of Threat Actors in Google Workspace Audit Logs

Many of the events we highlight in this blog post and the cheat sheet occur as part of normal business operations...

Megan Roddie-Fonseca

Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting

The Quest to Summit | SANS ICS Security Summit 2024

Register for the ICS Security Summit to be able to participate in The Quest to Summit and win big prizes.

Security Awareness, Cybersecurity Leadership, Cloud Security, Open-Source Intelligence (OSINT), Industrial Control Systems Security, Digital Forensics, Incident Response & Threat Hunting, Cybersecurity and IT Essentials, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, CyberLive, Workforce Development, Career Development, Why Certify, Imposter Syndrome, NetWars, Mentorship, Job Hunting, Operating System & Device In-Depth, Artificial Intelligence (AI)

A Visual Summary of SANS New2Cyber Summit 2024

Check out these graphic recordings created in real-time throughout the event for SANS New2Cyber Summit 2024