Skip to content
  • About
  • Contact
  • Find Me
  • Posts
  • LinkedIn
  • Twitter
  • GitHub
  • This Week In 4n6
Search
Close

ThinkDFIR

random musings on DFIR topics

Tag: Windows 7

Sunday Funday – Cutting across NTFS Volumes

November 9, 2018December 1, 2018 Phill Moore1 Comment

cut-up-book2

Another Sunday Funday!

This time, we’re cutting and pasting across volumes. I decided to take a slightly different route than last week and just created two VHDs to cut and paste between. (I have no idea why I didn’t think of that last week, do all of the copying and pasting in one go and then be done with it. If there’s a hard way to do something, I will find it 🙂 ).

Read More »

Sunday Funday – Copying across NTFS volumes

November 3, 2018November 4, 2018 Phill Moore1 Comment

caligraphist

Since I’m home and the baby is asleep I thought I’d spend some time on this weeks Sunday Funday challenge. I probably should sleep too, but that’s a problem for future me 🙂

Read More »

Recent Posts

  • Tracking screenshots with LNK files
  • I can see and hear you seeing and hearing me!
  • Introducing Awesome BEC
  • You want me to deal with how many VMDKs!?
  • Metaspike CTF – Week 6 – “HODL onto your timestamps”
  • Metaspike CTF – Week 5 – “Spot the DFIRence”
  • Metaspike CTF – Week 4 – “IM APparently making this harder than it was meant to be”
  • Metaspike CTF – Week 3 – “PS(s)T, Can you keep a secret message?”
  • Metaspike CTF – Week 2 – “As per my previous email”
  • Metaspike CTF – Week 1 – “It’s legit, honest!”

Enter your email address to follow this blog and receive notifications of new posts by email.

Archives

logo

RSS SANS Teaching

  • An error has occurred; the feed is probably down. Try again later.
Website Powered by WordPress.com.
Back to top
  • Follow Following
    • ThinkDFIR
    • Join 6,650 other followers
    • Already have a WordPress.com account? Log in now.
    • ThinkDFIR
    • Customize
    • Follow Following
    • Sign up
    • Log in
    • Report this content
    • View site in Reader
    • Manage subscriptions
    • Collapse this bar
 

Loading Comments...