We had a great Forensic Lunch today. We didn't have any official guests this week , just Matthew, You and I talking about what was interesting to us this week. We talked about:

1. The SANS DFIR Summit

2. The For 408 class I am currently assisting with

3. The research into USB Device history that is leading to a race for application development between Eric Zimmerman and myself

Here are the links to he USB device lookups I found:

Official list of Vendors from USB.org (requires you to convert from decimal to hex to match in the registry) http://www.usb.org/developers/tools/c...

The Linux USB driver list of known USB Vendors and Products:

http://www.linux-usb.org/usb.ids


4. A good discussion about programming in DFIR and the movement towards common output formats and moving data between tools.