Black Hat Windows 2002 - NT/2K Incident Response & Mining for Hidden Data: PostMortem of Windows Box
▶Black Hat Windows 2002 - NT/2K Incident Response & Mining for Hidden Data: PostMortem of Windows Box — a 2002 Black Hat security conference talk on dfir, windows-ad (1:30:05 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube