MoVP II – 2.3 – Creating Timelines with Volatility
by Jamie Levy | May 23, 2013 | forensics, grrcon, malware, movp, timelines, windows
A common computer forensic investigative methodology is creating timelines. Timelines help establish events that took place on the machine prior to investigation. There are various artifacts in Windows memory that can be used to construct a timeline....
You must be logged in to post a comment.