Zip File Forensics
This training will review the effects that various Zip programs have on date time stamps, help participants understand the cause of that effect, and dive deep into the internal structure of a Zip archive. Attendees will learn how to manually carve zip file elements and edit the structure as necessary to combine the carvings into a single viable zip file.