Windows Forensics on a Mac?! You Have to See This!
MentionsMicrosoftMicrosoft WindowsAppleGitHubmacOS
Plays from YouTube in privacy-enhanced mode — nothing loads from YouTube until you press play.
In this special guest episode, we'll look at IRFlow Timeline, a free, open-source DFIR timeline analysis tool built natively for macOS. Ingest EVTX, Plaso, $MFT, $J, and more, then dig in with process inspection, lateral movement tracking, persistence detection, and VirusTotal enrichment. No Windows VM required. Presented by Renzon Cruz, the author of the tool. *** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed.
Description from 13Cubed.