Black Hat Windows 2002 - NT/2K Incident Response & Mining Hidden Data: PostMortem of Windows Box pt2
▶Black Hat Windows 2002 - NT/2K Incident Response & Mining Hidden Data: PostMortem of Windows Box pt2 — a 2002 Black Hat security conference talk on dfir, windows-ad (1:32:20 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube