Recap of the crimes against children conference and a tool update with Brian Lockery
Troubles trying to integrate TSK with Perl
The new book website!
The experience and value of a bachelors in computer forensics and more!

James talks about parsing MAPI information with a new script.

Kyle talks about research into public data breaches.

Joseph Shaw discusses the insider incidents.

Kyle Maxwell talks about CryptoParty

James discusses Outlook Message Conversation Index

Dave and Matt show their Plist Parser

Eric Zimmerman discusses forensic imaging tools performance

Phil Hagen talks about his new SANS 572 course

Lee Whitfield asks about building a good forensics box

Joachim Metz and Kyle Maxwell talk about maintaining a forensics encylopedia that is accessable to everyone and more!

Links for this week:

For the VCDB You can get an overview here:
http://public.tableausoftware.com/vie... for VCDB.
The VCDB Github is located here:
https://github.com/vz-risk/VCDB
And the currently open issues is here:
https://github.com/vz-risk/VCDB/issue...

You can visit Tzworks here:
https://www.tzworks.net/

And get the tools shown today here:
LNK Parser: https://www.tzworks.net/prototype_pag...
Jump list parser: https://www.tzworks.net/prototype_pag...
Shellbag parser: https://www.tzworks.net/prototype_pag...
GENA here: https://www.tzworks.net/prototype_pag...

Guests this week:
Harlan Carvey
Zoltan Szabo
Jake Williams

Links for today:
Harlan's Blog: http://windowsir.blogspot.com/
Zoltan's Associates Degree: https://www1.dcccd.edu/catalog/progra...
Jake's FOR 610 Class: http://www.sans.org/vlive/details/for...

IR Roundtable Part 1

Forensic Lunch this week is a IR Round Table with:
James Lohman (G-C Partners)
Kyle Maxwell (Verizon Business)
Darren Windham (NGO)

Talking about methodologies for approaching incidents, triaging malware and showing ROI to executives

Forensic Lunch 10/11/13 IR Roundtable Part 2

Join us this week as we continue our IR Roundtable from last week with:
Darren Windham (NGO)
Joseph Shaw (Alvarez)
Kyle Maxwell (Verizon)
James Lohman (G-C)

Great topics regarding how to deal with and scope data exfiltration and dealing with lateral movement and attacker intelligence.

Dave and Matthew talk about the updated GUI for ANJP, finding the actions programs leave behind in the file system to create signatures and more!