The SANS DFIR Summit, our favorite talks and what makes it stand out as a conferenceDave Hull's, @davehull project Kansa http://github.com/davehull/kansaAn in depth discussion of Volume Shadow Copies discssuing: How to identify how much shadow copies are active on a volume (without VSS Admin) Evidence of Automatic vs Manual VSC deletion What different tools show for how many VSCs exist What you can and can't implictily trust How to validate what you seeMore about what forensic tools should provide to an examiner at a minimumAnd BBQ Summit talk!As discussed the show may change after next week and the weekly shows are no longer required to meet my year of blogging. I'd like to hear your thoughts of what would make show more valuable to. Topics I'd like to hear from you on include but are not limited to:Frequency, should we keep it once a week or go to twice a month / once amonthTopics, Are we covering what is important to you? Should we add anything else?Format, Do you enjoy the guests or us talking more?Time of day/Day of week, Is there a better time we could be doing this so more of you can watch it liveLet me know in the comments below or email me [email protected], we do the show for you not us!