I found something interesting on the SANS website and I think that Mr. Churchill has a great idea. He writes the following:
"In my opinion, if someone was to take CCleaner?s .INI files and create a tool that does the exact opposite of CCleaner ? parse each item and create an information report instead of cleaning them, they would have one heck of a triage tool."
Matt Churchill currently manages the digital forensics practice at Continuum Worldwide and has earned the GCFA, CFCE, CCE, and CISSP certifications. You can follow him on Twitter @matt_churchill.
Has anyone at Piriform thought about getting into the digital forensics arena? I know 10 different agencies that would jump on the product he is describing.
