Shell items, More than Meets the Eye

Join SANS webcast with David Cowen on Monday, May 16, 2016 at 1:00 PM EDT (17:00:00 UTC).

Shell_items_webcast_weare4n6

Here is its overview:

Its time to revisit everyones favorite windows forensic resources; shell items. Whether you like to look at them as lnk files, jumplists, shell bags or registry entries they are everywhere. In recent years and in recent versions of Windows we keep finding more data within shell items we can use to make even more correlations and find more evidence! Tune in to see new research, tools and analysis you can use to take your case farther today.

[su_button url=”https://www.sans.org/webcasts/shell-items-meets-eye-102247″ target=”blank” style=”flat” background=”#222348″ size=”7″ radius=”0″]Register[/su_button]

DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.