Live Forensics Using WFT - Fool Moon

Live forensics is the focus of this talk, but specifically in conjunction with the Windows Forensic Toolchest (WFT). The goal of any live forensics task should be to extract and preserve the volatile data on a system while, to the extent possible, otherwise preserving the state of the system.

  Using, Live, Forensic, Live forensics using wft, Live forensics