In reference to my talk at the RSA Conference 2017: “Adventures in Underland: What System Stores on the Disk Without Telling You” I am sharing slides and tools from the presentation:

Even though you are the only person using a computer, you are not the only one writing to your disk drive! Surprisingly your disk drive contains a lot of juicy information that can reveal a lot of secrets and history about what you did in the past. There are also places where data can be deliberately hidden by malicious software. It would be great to know what those are!

Get some of the tools I used during the demo. These include among others: CQ Secrets Dumper & CQ Sysmon Net Analyzer.