Stuff n Things

Yep I write about Stuff.. and Things

January, 2010

Posts
  • Some more logparser & eventcomb stuff for IR work

    Counting and sorting by unique text in the strings section: As a follow on to a previous article http://blogs.technet.com/kfalde/archive/2009/01/28/using-logparser-eventcomb-to-find-malware.aspx I found some other useful queries that I figured I would...