Mastering the Super Timeline With log2timeline

Traditional timeline analysis can be extremely useful yet it sometimes misses important events that are stored inside files or OS artifacts on the suspect. By solely depending on traditional filesystem timeline the investigator misses context that is necessary to get a complete and accurate...

By

Kristinn Guðjónsson

August 25, 2010

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Cybersecurity Insights

Computer Security Resources

A collection of paid and free Computer Security Resources from SANS.

Cybersecurity Insights

20 Coolest Cyber Security Careers

We've all been talking about The Skills Gap for some time now, but what does this mean, what effect does this have on global organizations, and is there anything we can we do about it?According to the Cyber security Jobs Report, the demand to fill roles within the information security industry is...

Cybersecurity Insights

December 7, 2020

SANS Zoom Backgrounds

Download our Zoom backgrounds!