Fundamental Computer Investigation Guide For Windows

Preparing Your Organization for a Computer Investigation   To prepare your organization for an internal computer investigation, you should assemble a readily available computer investigation toolkit that includes software and devices you can use to acquire evidence. Such a toolkit might contain a laptop computer with appropriate software tools, different operating systems and patches, application media, backup devices, blank media, basic networking equipment, and cables. Preparing this toolkit can be an ongoing task as you find the need for various tools and resources, depending upon the investigations you need to conduct. Use the following guidelines when building and using a […]

Read more

Symantec SEP DB query: Risk Action Taken Status Codes

  ACTUALACTION_IDX (int, NOT NULL) is a Pointer to table ‘actualaction’; this is the action taken on the risk. Select * from ACTUALACTION -1    Action Failed 1    Quarantined 2    Renamed 3    Deleted 4    Left alone 5    Cleaned 6    Cleaned or Macros Deleted 7    Saved 9    Move Back 10    Rename Back 11    Undo 12    Bad 13    Backup 14    Pending Repair 15    Partially repaired 16    Reboot Pending 17    Exclude 18    Reboot Processing 19    Cleaned by deletion 20    Access Denied 21    Process Terminated 22    No Repair Available 23    No Action Taken 98    Suspicious 99    Details Pending 100    IDS block 101    FW violation 110    […]

Read more

Excel Formulas

Data Validations: Checking whether the cell has a number or not, usually useful while checking accounts/transactions/banking sheets. =(F2-(IF(ISNUMBER(D3),D3,0))) + (IF(ISNUMBER(E3),E3,0)) Checking whether the cell is BLANK, usually useful in textual/string validations =(F2-(IF(ISBLANK(D3),D3,0))) + (IF(ISBLANK(E3),E3,0)) Conversions: Date values: India to US Input Date Format: 7/1/2011  (days in single digits) Conversion Formula: DATE(YEAR(B3),DAY(B3),MONTH(B3)) Output Date Format: 1/7/2011 Input Date Format: 14/01/2011  (days in two digits) Conversion Formula: DATEVALUE(MID(B8,4,2)&”/”&LEFT(B8,2)&”/”&RIGHT(B8,3)) Output Date Format: 1/14/2011 Reference articles: How to use dates and times in Excel HOW TO: Convert Dates in Imported Files from yy/mm/dd to mm/dd/yy Format in Excel 2000

Read more