SEARCH
TOOLBOX
LANGUAGES
Revision history of ""The audit log was cleared" won’t stop me: Advanced Windows Event Log Forensics"

Revision history of ""The audit log was cleared" won’t stop me: Advanced Windows Event Log Forensics"

From BruCON 2017

Jump to: navigation, search

Diff selection: Mark the radio boxes of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

  • (cur | prev) 21:16, 9 September 2014Znb (talk | contribs). . (652 bytes) (+652). . (Created page with "Obviously, event logs contain key forensic artefacts. But what can you do when they’ve been destroyed? This two hour, hands-on workshop will kick off with advanced recovery...")