It’s that time of year when I travel all around the UK visiting family and remembering what it’s all about. This year has been an interesting one for me on my
I have finally bowed to the pressure of my good friend Kev [https://twitter.com/KevTheHermit]and now have a server! I must point out that it is his old server and through
Those of you who are following my blog will remember that in my last EnScript blog post [http://chip-dfir.techanarchy.net/?p=138]I created a UsnJrnl EnScript and I promised I would
As I have mentioned previously one of the things I want to learn to make me a better Forensic Analyst is Python. Mainly because Kev [https://twitter.com/kevthehermit] can’t complete a
Just a quick blog post for the reasoning behind moving my blog. There were several reasons for the move, the main one being the relocation to the techanarchy.net [http://techanarchy.net]domain.
Going through my SANS 508 material I decided to have a closer look at some of the material on the Master File Table ($MFT) in the NTFS file system and how the analysis