Tips & Tricks // Looking at the Source Data to Support an Artifact
In this Tips & Tricks webinar, we will show you how to dig deeper and validate evidence using the Locate Source feature. Join Jessica Hyde, Director of Forensics, as she show you how to locate files and the hex for artifacts parsed from files, unallocated space, registries, SQLite databases, and more. We will explore artifacts that use multiple sources and how to tell what table and row a specific artifact was parsed from. Additionally, we will show how to reverse source link from the file system allowing you to see what artifacts have been parsed from a specific file or folder and how this can be useful in your investigations. These tips and tricks regarding locating source will be helpful in validating and understanding artifacts in your results.
After viewing this webinar you will be issued a certificate by email documenting that you have taken part in the session.