Forensic Carving of Network Packets with bulk extractor and tcpflow
▶Forensic Carving of Network Packets with bulk extractor and tcpflow — a 2012 CERIAS - 2012 security conference talk on dfir, network (46:24 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube