FOR585 Course Animation: How WAL Gets Populated Initial State

Understanding how a WAL and DB interact when applications are being used is a must in DFIR. When separated, the data may not merge and provide a complete answer. When together, the data is complete. This video explains how data exists in the WAL and DB and issues you may have if your tools don’t understand the concepts.

For more information about FOR585 visit: www.sans.org/FOR585

animation course state