I happened to come across a blog on computer forensics ‘Computer Forensics Blog – Notes on computer forensics’ [http://computer.forensikblog.de/en/].
There is interesting information like:
How to enumerate members of a group out of the SAM with a hex editor and AccessData Reg. Viewer:
A few mentions about computer forensics conferences and workshops:
A parser for Windows Vista Event logs:
and for those of you with Tableau Write Blockers, get the latest firmware update (4.3):