BSidesIOWA 2015 Track1: File History Deconstructing the Catalog by Kenneth Johnson
▶BSidesIOWA 2015 Track1: File History Deconstructing the Catalog by Kenneth Johnson — a 2015 BSidesIowa security conference talk on dfir, windows-ad (29:19 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube