why when how...folder inbox drafts sent trash flags (read, etc) hunderbird 7,584 3371 yes tool 1...

Post on 25-May-2020

5 Views

Category:

Documents

0 Downloads

Preview:

Click to see full reader

TRANSCRIPT

Why

When

How

Mari DeGrazia, Director at Kroll Cyber Security

az4n6.blogspot.com

github.com/mdegrazia

@MariDegrazia

Accurate results

Tools are not perfect

Lead to false results

Hot Seat

Vague column headings

Missing time zone information

Parses partial data

New OSNew Tool

NIST

Real World

Generate

*Test data provided by Eric Zimmerman’s Blog Post: https://binaryforay.blogspot.com/2016/05/appcompatcacheparser-v0900-released-and.html

*Test data provided by Eric Zimmerman’s Blog Post: https://binaryforay.blogspot.com/2016/05/appcompatcacheparser-v0900-released-and.html

0x0080

0x0088

Know your artifacts

Check release notes

Check github issues

Let developers know

Share your test results

top related