Quick and Effective Windows System Baselining and Comparative Analysis for Troubleshooting and Incident Response

Baselining is an important tool for troubleshooting, audit, incident response and forensics. It involves documenting the features of a known good state of a system. This can be used to do a comparative analysis of the current system state to determine what has changed and how it was changed. In...

By

Kevin Fuller

February 14, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

OO - Blog - November 2024's Top Threats_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 25, 2024

SANS Threat Analysis Rundown in Review: Breaking Down November 2024’s Top Threats

There’s always plenty of news on cyber threats to discuss, and this month was no exception.

DFIR - Blog - Women In Russian-speaking Cybercrime_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 18, 2024

Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?

Women’s roles in Russian-speaking cybercrime, though less visible than men’s, are evolving and significant.

Anastasia Sentsova

Anastasia Sentsova

DFIR - Blog - New FOR518- Mac and iOS Forensic Analysis Poster Update_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

November 11, 2024

New FOR518: Mac and iOS Forensic Analysis Poster Update

The latest updates to the Digital Forensics and Incident Response Poster bring a wealth of new sections and enhancements.