Session
Just-in-time Oubliette: Dynamic Forensic Evidence Collection Infrastructure
Tools Demo for Just-in-time Azure-based infrastructure for securely storing and accessing forensic evidence. This environment is intended to be useful for when you have multiple investigators or untrusted external parties adding data for evaluation. Some key features automatically implemented in this setup leverage the immutable Azure Storage legal hold, Read-only/Write-only SAS Tokens, Azure Storage analytics logging for validation of access by which parties, Azure Key Vault logging with the logs going to a Log Analytics workspace in the resource group.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top