Скачать или смотреть SANS How To's: SRUM-DUMP (System Resource Utilization Monitor) Tool

Learn more about SRUM-DUMP Tool: https://isc.sans.edu/forums/diary/Sys...
Learn Python: www.sans.org/sec573

In this video Mark Baggett (twitter:@markbaggett) will show you how you can use a tool named SRUM-DUMP to capture critical DFIR (Digital Forensics and Incident Response) data like the dates and times processes were executed, which networks they used, how much data was transmitted and received, the Security Identifier of the user that launched the process and more. Then Mark will show you a tip that developers of forensics tools can use to convert binary flags into their associated text descriptions. If this tip seems a little too advanced for you; have no fear, SANS SEC573 is perfect for coders of all skill levels to come and learn to code in a self-paced training environment.