Thursday, September 01, 2011

Windows 7 Forensics

So I was discussing with an old coworker today about the desire to learn a tad more about Windows 7 in a forensic sense. It is much different than XP (which still has a good chunk of market shares, quite impressive for being 10 years old) and since I am going to be back on the job saddle **cough cough** soon, its good to start thinking about these things...

So, I present some good links on Windows Vista/7 in terms of forensics:

Iron Geeks Forensically Interesting Spots in Windows 7/Vista
: So not all of these are new by any stretch, but I see some interesting opportunities for scripting when I see these. I might be playing with Harlan Carvey's RegRipper and my boyfriends Windows 7 box (ahhh there is always a sacrificial lamb) soon.

Windows 7/VISTA Advanced Forensics for LE: Seems to have some interesting downloads, including one on Shadow Volumes

On another note I am trying to pick up Java, because even though I hate (ok maybe not hate, just do not like very much in the words of my granny) programming I do appreciate how useful knowing how to write/read it can be. I am still on baby steps, but I am using the book "Understanding Java" by Barry Cornelius. Very descriptive, good explanations, and no cheesy graphics. Not that I mind cheesy, heck you will never guess where I am headed this weekend!! :: suspense::

No comments: