Oleg Skulkin's guest appearances

Oleg Skulkin

The Forensic Lunch with David Cowen and Matthew Seyer

Jared Atkinson

Jim Arnold

Mari DeGrazia

Lee Whitfield

Dave Hawkins

Suzanne Widdup

Chris Pavan

James Habben

Eric Zimmerman

Ryan Benson

Tom Pace

Zach Wasserman

Jack Farley

Lance Spitzner

Martin Korman

OwlTail

      This week the Forensic Lunch went into Overtime! We went a full 25 minutes over the usual hour because we had so much to talk about. On this weeks show:    Matt Seyer (@forensic_matt) talked all about the etl parser and monitor he's working on in Rust! https://github.com/forensicmatt/RsWindowsThingies Oleg Skulkin (@oskulkin) talked about how he approaches Sunday Funday's (he's won 3!) and about his new blog post about the Windows FeatureUsage artifact.  https://www.group-ib.com/blog/featureusage Brian Marks (@briandfir) talked about how the Office365 UAL MailboxItemsAccessed Audit event works and what the entry details mean   Lee Whitfield (@lee_whitfield ) talked through the Forensic 4Cast Awards nominations that end in two weeks, and Matt and I gave who we will be nominating.  https://forensic4cast.com/2020/02/2020-forensic-4cast-awards-nominations-are-open/ 

<p>      This week the Forensic Lunch went into Overtime! We went a full 25 minutes over the usual hour because we had so much to talk about. On this weeks show:</p> <p> </p> <ul> <li>Matt Seyer (<a href="https://twitter.com/forensic_matt" rel="nofollow" target="_blank">@forensic_matt</a>) talked all about the etl parser and monitor he's working on in Rust! <a href="https://github.com/forensicmatt/RsWindowsThingies" rel="nofollow" target="_blank">https://github.com/forensicmatt/RsWindowsThingies</a></li> <li>Oleg Skulkin (<a href="https://twitter.com/oskulkin" rel="nofollow" target="_blank">@oskulkin</a>) talked about how he approaches Sunday Funday's (he's won 3!) and about his new blog post about the Windows FeatureUsage artifact.  <a href="https://www.group-ib.com/blog/featureusage" rel="nofollow" target="_blank">https://www.group-ib.com/blog/featureusage</a></li> <li>Brian Marks (<a href="https://twitter.com/brianDFIR" rel="nofollow" target="_blank">@briandfir</a>) talked about how the Office365 UAL MailboxItemsAccessed Audit event works and what the entry details mean  </li> <li>Lee Whitfield (<a href="https://twitter.com/lee_whitfield" rel="nofollow" target="_blank">@lee_whitfield</a> ) talked through the Forensic 4Cast Awards nominations that end in two weeks, and Matt and I gave who we will be nominating. <a href="https://forensic4cast.com/2020/02/2020-forensic-4cast-awards-nominations-are-open/" rel="nofollow" target="_blank"> https://forensic4cast.com/2020/02/2020-forensic-4cast-awards-nominations-are-open/</a></li> </ul>

Forensic Lunch 5/1/20 - Oleg Skulkin (FeatureUsage), Brian Marks (Office 365) , Lee Whitfield 4CAST