The DF in DFIR

Presentation from #zoosec on things I’ve learned the hard way doing forensics.

The DF in DFIR_v2

 

Most of the “good stuff” is in the speaker notes