Using process labels to obtain forensic and traceback information
▶Using process labels to obtain forensic and traceback information — a 2005 CERIAS - 2005 security conference talk on dfir (47:10 min). Watch the full video, indexed free on the Breach Arc Archive.
▶ Watch video on YouTube