-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
Sleuthkit indicates that all MD5's are identical for an imported Win7 image.
Perhaps this is related to a missing module (icat ?)?
-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
I need to install a SIFT workstation on an ESXi server which doesn't have a whole lot of space. Since the two virtual disks are preallocated at 500Gb each, ESXi tries to reserve 1 Tb for them when pow…
-
Does sans only support 64bit systems?
-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
```
I discovered these issues while working on the DFIRCon Memory Analysis
Challenge (http://dfir.to/APT-MEMORY), but I suspect they're all generic. It
could even be just me, but the tool's certainl…
-
I believe line 262 should read
my $config = "$::TSKDIR/../share/tsk/sorter/images.sort";
and not my $config = "$::TSKDIR/../share/tsk3/sorter/images.sort";