Digital forensic examiners are investigators who are experts in gathering, recovering, analyzing, and presenting data evidence from computers and other digital media related to computer-based .They might work on cases concerning identity theft, electronic fraud,investigation of material found in digital devices ,electronic evidence, often in relation to cyber crimes.
The all-new (and FREE) SANS Community #CTF You can register at http://tomahawque.com
ซึ่ง SANS มีจัดกิจกรรม Capture The Flag (CTF) แบบนี้เป็นประจำทุกปี โดยกิจกรรมจะเปิดและปิดเป็นช่วงงต้องติดตามในตารางของแต่ละช่วง Event คุณสามารถเข้าไปลงทะเบียนรอบต่อไปได้ที่ http://tomahawque.com
The course Introduction to CyberArk
Privileged Access Security is designed for anyone who is interested in
learning about privileged account security. It is highly recommended for
any professional who will be part of a CyberArk project.
The course is a free on-line course. This free, entry-level certification course enables a participant to:
Explain the importance of Privileged Access Security.
Computer Requirements:
Speakers or headphones are required in order to watch and listen to the
multimedia course presentation slides and the videos provided as part
of the case study assessment. Duration: The duration of the course is approximately two hours. Relevant Certification: Trustee (Level 1) Details Outline:
Introduction to Privileged Access Security
Business Risk – Insider Threat
Business Risk – Targeted Attacks and the "attack life-cycle"
Business Risk – Ransomware The CyberArk Solutions
CyberArk Blueprint for PAS Success
Introduction to DevOps and Secrets Management
[OPTIONAL] CyberArk and the CyberArk Solution
DIGITAL FORENSICS:Recover deleted files with Shadow Explorer. การกู้ข้อมูลบน Windows ด้วย Shadow Explorer
Tools
- Shadow Explorer.
- Windows 8 pro workstation
Step 1. เข้าไป download Shadow Explorer.
Shadow Explorer
Step 2. เปิด ShadowExplorerPortable.exe
After successfully installing ShadowExplorer, you can find a shortcut on your desktop or in your start menu. running ShadowExplorer Or running ShadowExplorer ShadowExplorerPortable.exe
ShadowExplorerPortable
Optional: The first thing you see after you start ShadowExplorer as administrator, is the user account control screen, require administrator privileges.
Shadow Explorer
Step 3. เลือกช่วงเวลาก่อนไฟล์โดนลบ This is what ShadowExplorer looks like if everything works correctly. From the drop down list you can select from one of the available point-in-time Shadow Copies.
Step 4. ทำการ export ไฟล์ออก You can right-click any file or folder and export it.
Step 5. รอสถานะจนกว่าจะเสร็จ
A progress bar shows the status of the retrieval process.
Note: You can try Previous versions to recover the files first. If no success, then you may try Shadow Explorer. Sometimes, Shadow Explorer may recover some files that Previous versions cannot.
Shadow Explorer is a free tool which allows you to browse the Shadow Copies, which created by Volume Shadow Copy Service, to retrieve older versions from files that you accidentally deleted or altered.
การกู้ข้อมูลบน Windows ด้วย Shadow Explorer
ที่มา :สอนวิธีการกู้ข้อมูลที่ถูกลบหรือเสียหายด้วย Shadow Explorer ช่อง Team's IT
