tag:blogger.com,1999:blog-9518042.post8579740632928244006..comments2024-03-19T07:46:20.437-05:00Comments on Windows Incident Response: ConferencesUnknownnoreply@blogger.comBlogger4125tag:blogger.com,1999:blog-9518042.post-57014107367280990042013-11-10T07:16:39.174-05:002013-11-10T07:16:39.174-05:00... if they present a tool they'll tell you wh...<i>... if they present a tool they'll tell you what you can do with it.</i><br /><br />Sure, but for the most part, saying, "...here's a tool and here's how you use it...", is one thing. I get that, and it's very beneficial for most folks. Many times, if I've seen something posted about the tool prior to a conference, I can generally get most of that from the announcement and description of the tool.<br /><br />What I tend to be more interested in is how someone addressed an issue...what where the thought processes, what worked, what didn't work, and why?<br /><br /><i>... want to focus more on the decisions made/mindset used in the case then the tools?</i><br /><br />Not so much...both really. But that's just me. I like to hear about new tools, but I'm also interested in thought processes and techniques used...not so much how you can use a tool, but how <i>did</i> you use the tool, particularly if it was in some novel manner.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-82039546490559616972013-11-09T21:54:56.449-05:002013-11-09T21:54:56.449-05:00So I was at SANS EU Prague e.g. there were a coupl...So I was at SANS EU Prague e.g. there were a couple of talks that were in-line of: I had this problem I've solved it by writing this tool, looking at this file and getting this information from it. IMO that's in the same line.<br /><br />In most conference if someone presents a tool, besides vendor conferences, if they present a tool they'll tell you what you can do with it.<br /><br />I get the impression to what you're referring to is: I have this case and these are the steps (and tools) I'd used to solve it and discuss it in full? And that you want to focus more on the decisions made/mindset used in the case then the tools?<br />Joachim Metzhttps://www.blogger.com/profile/14169983450780601879noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-19902986408051954672013-11-09T15:59:45.093-05:002013-11-09T15:59:45.093-05:00Joachim,
... there are already too many of these....Joachim,<br /><br /><i>... there are already too many of these...</i><br /><br />How so? Can you name some? I'm just curious, as many of the presentations I've seen at conferences are more along the lines of "...here's a tool, here's another tool..." but too few practitioners are sharing how they've used or extended tools to get a job done. <a href="http://journeyintoir.blogspot.com" rel="nofollow">Corey Harrell</a> is a big exception to that.<br /><br />Thanks.H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-9518042.post-53416494585812930262013-11-09T12:05:55.316-05:002013-11-09T12:05:55.316-05:00Personally, I'm more interested in the talks t...<i>Personally, I'm more interested in the talks that present how a practitioner used open source tools to accomplish something, solve a problem, or overcome a challenge. I'm not so much interested in academic presentations, nor so much in talks that talk about open source tools that folks have developed.</i><br /><br />IMO there are already too many of these "how to use the tool talks". I think the OSDFCon is a good alternative to these and good for getting the developers of the tools together with the users.Joachim Metzhttps://www.blogger.com/profile/14169983450780601879noreply@blogger.com