{"guid":"5c8efab1-6819-49b0-bccd-0393dd7f3ade","title":"Datenspuren auswerten","subtitle":"Forensik für Einsteiger","slug":"DS2017-8682-datenspuren_auswerten","link":"https://c3voc.de","description":"Gerne möchte ich Euch Einblicke in das Thema Forensik geben; speziell könnte es um Windows-Forensik gehen.\nIch möchte aufzeigen, welche Daten man beim normalen Arbeiten gewollt oder ungewollt im System hinterlässt und wie Forensiker das nutzen um Aussagen zu treffen.\nInsbesondere möchte ich aber auch verdeutlichen, wie halbseiden teilweise die Aussagekraft von forensischen Analysen ist.\n\nZeitlich sind 45 Minuten relativ knapp; wenn ihr also wenig Programm habt, nehme ich auch gerne einen 90 Minuten slot.","original_language":"deu","persons":["klobs"],"tags":["DS2017","8682"],"view_count":761,"promoted":false,"date":"2017-10-22T00:00:00.000+02:00","release_date":"2017-10-23T02:00:00.000+02:00","updated_at":"2026-03-19T08:45:04.485+01:00","length":5563,"duration":5563,"thumb_url":"https://static.media.ccc.de/media/events/datenspuren/2017/8682-hd.jpg","poster_url":"https://static.media.ccc.de/media/events/datenspuren/2017/8682-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/events/datenspuren/2017/5c8efab1-6819-49b0-bccd-0393dd7f3ade-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/events/datenspuren/2017/5c8efab1-6819-49b0-bccd-0393dd7f3ade-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/DS2017-8682-datenspuren_auswerten","url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_title":"Datenspuren 2017","conference_url":"https://api.media.ccc.de/public/conferences/DS2017","related":[{"event_id":1605,"event_guid":"import-37c1600436b10d0770","weight":4},{"event_id":1989,"event_guid":"4NABdZ7ki6qrAcGzcGtrqQ","weight":4},{"event_id":2106,"event_guid":"JLh_ecvn744ro0dQFWD_jA","weight":6},{"event_id":2107,"event_guid":"tzOmjwXgN1q75klvZ9nPrA","weight":4},{"event_id":2123,"event_guid":"CiTCK-gb6Mio3mpYu4sJ2g","weight":5},{"event_id":3548,"event_guid":"2cf17a2b-cfc5-4782-a1eb-91656d073b04","weight":5},{"event_id":3560,"event_guid":"21141199-d313-4a9f-83b0-e81089a07fee","weight":5},{"event_id":3671,"event_guid":"4ef69e6a-026f-4b30-888d-af654b220a3d","weight":6},{"event_id":3695,"event_guid":"c300b194-2a85-4705-92aa-b4e789882303","weight":4},{"event_id":3762,"event_guid":"25e2df7d-5740-4c2f-bc34-986326d606fe","weight":4},{"event_id":4606,"event_guid":"5400c892-12e3-4199-b976-a68b0b54c159","weight":4},{"event_id":4640,"event_guid":"673928f6-6777-4da7-aac3-e36dfea16063","weight":5},{"event_id":4664,"event_guid":"8d3b7f85-76ed-4532-a986-7d53d7fcce49","weight":7},{"event_id":4665,"event_guid":"bac361fe-2e40-4671-abd5-694d07187365","weight":23},{"event_id":4666,"event_guid":"dbaa263c-62ed-4565-b184-fd85a7e6fd2c","weight":31},{"event_id":4667,"event_guid":"9b3292f5-f7bd-49f9-8c2b-5dc98d72e6a4","weight":76},{"event_id":4668,"event_guid":"d1ff1805-f2c4-4da6-9437-deb109e6383f","weight":36},{"event_id":4669,"event_guid":"d81a5dd7-4132-4afe-8749-aab08b324687","weight":22},{"event_id":4670,"event_guid":"5e523cf9-935e-4c90-90a1-38ada7773e97","weight":16},{"event_id":4688,"event_guid":"06076c6a-fb46-4323-8441-97400689056b","weight":7},{"event_id":4689,"event_guid":"eb4dd7b0-e369-4c7e-96ff-362fe37068f5","weight":4},{"event_id":4690,"event_guid":"9c7834b9-816d-4c56-b242-53d37af3741b","weight":33},{"event_id":4691,"event_guid":"fd6ae8ae-e424-458a-b5ae-691c86c3a551","weight":19},{"event_id":4692,"event_guid":"3cd23062-2dde-4a4e-8379-29fae767f68a","weight":12},{"event_id":4693,"event_guid":"7180f36d-9892-4596-8173-a1b5899569c3","weight":25},{"event_id":4694,"event_guid":"39e1e8bd-418b-4463-b105-abcd086a4eb3","weight":15},{"event_id":4696,"event_guid":"aad58a90-70b8-4cf1-9fc1-34bbfe97d107","weight":9},{"event_id":4697,"event_guid":"d1ad1f19-57fe-4e84-966a-cf880c0118a3","weight":19},{"event_id":4698,"event_guid":"87de639d-024d-48d7-8955-3f529befc9f5","weight":15},{"event_id":4699,"event_guid":"b155c4b0-2ee6-42a7-a118-8d0629ff6ef0","weight":11},{"event_id":4700,"event_guid":"aadf222c-3ded-49b4-b80e-5a36e17d5dcb","weight":41},{"event_id":4703,"event_guid":"6c45824e-f5a7-4961-8941-11eaa43f638b","weight":19},{"event_id":4704,"event_guid":"886ed082-f2f9-46dc-84ca-9edc2f31b573","weight":5},{"event_id":4705,"event_guid":"f564c42d-6096-4d0f-969c-6deea1ccbf76","weight":25},{"event_id":4791,"event_guid":"8d29d28d-a222-4731-bdfc-fde590385cae","weight":5},{"event_id":4934,"event_guid":"4d3d9d56-7617-44da-b620-21ce5389a0b2","weight":4},{"event_id":5062,"event_guid":"a15280a6-4f11-4c81-9e9c-7bd9cb6ed343","weight":4},{"event_id":5230,"event_guid":"444a3850-455a-2020-2020-202020202020","weight":4},{"event_id":6021,"event_guid":"ac6568e2-ae17-43b6-b7ff-8fd9799c259f","weight":5},{"event_id":6024,"event_guid":"04b15cf2-0797-464d-92c1-245bff59b4bc","weight":11},{"event_id":6543,"event_guid":"48ed6dea-e67d-4866-8c35-318e9d892363","weight":5},{"event_id":7935,"event_guid":"134a9ee0-53b5-4a62-81d8-9406c85767c9","weight":4}],"recordings":[{"size":297,"length":5563,"mime_type":"video/mp4","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten_hd.mp4","state":"new","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-10-23T00:46:28.745+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/h264-hd/DS2017-8682-deu-Datenspuren_auswerten_hd.mp4","url":"https://api.media.ccc.de/public/recordings/20209","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"},{"size":75,"length":5551,"mime_type":"audio/opus","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten.opus","state":"new","folder":"opus","high_quality":false,"width":0,"height":0,"updated_at":"2017-10-23T21:10:09.731+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/opus/DS2017-8682-deu-Datenspuren_auswerten.opus","url":"https://api.media.ccc.de/public/recordings/20242","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"},{"size":495,"length":5563,"mime_type":"video/webm","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten_webm-hd.webm","state":"new","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2017-10-23T21:11:06.104+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/webm-hd/DS2017-8682-deu-Datenspuren_auswerten_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/20243","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"},{"size":146,"length":5563,"mime_type":"video/mp4","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten_sd.mp4","state":"new","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-10-23T21:11:18.880+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/h264-sd/DS2017-8682-deu-Datenspuren_auswerten_sd.mp4","url":"https://api.media.ccc.de/public/recordings/20244","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"},{"size":84,"length":5551,"mime_type":"audio/mpeg","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten.mp3","state":"new","folder":"mp3","high_quality":false,"width":0,"height":0,"updated_at":"2017-10-23T21:11:47.037+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/mp3/DS2017-8682-deu-Datenspuren_auswerten.mp3","url":"https://api.media.ccc.de/public/recordings/20245","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"},{"size":224,"length":5563,"mime_type":"video/webm","language":"deu","filename":"DS2017-8682-deu-Datenspuren_auswerten_webm-sd.webm","state":"new","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2017-10-23T21:12:31.130+02:00","recording_url":"https://cdn.media.ccc.de/events/datenspuren/2017/webm-sd/DS2017-8682-deu-Datenspuren_auswerten_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/20246","event_url":"https://api.media.ccc.de/public/events/5c8efab1-6819-49b0-bccd-0393dd7f3ade","conference_url":"https://api.media.ccc.de/public/conferences/DS2017"}]}