Mark Hallman

[Mark Hallman @mhallman]

@grayfold3d Interesting, I have not heard that one. The SRUM data may not cover the time period you are looking at but the the app and network usage might be interesting for TeamViewer. We can take this offline if you want. Been a while since we talked. Hope you are well.

[Mark Hallman @mhallman]

@grayfold3d Sorry if I'm posting this twice...

What is the value of “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
Management\PrefetchParameters\EnablePrefetcher”. Zero = Disabled

[Mark Hallman @mhallman]

@grayfold3d Although a short time horizon, you could check SRUM.

[Mark Hallman @mhallman]

@grayfold3d What is the value of “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory
Management\PrefetchParameters\EnablePrefetcher”. Zero = Disabled

[Mark Hallman @mhallman]

@HeatherMahalik @kevinripa Nice choice / gift!

[Mark Hallman @mhallman]

@lee_whitfield Congradulations my friend! I can’t think of anyone more deserving of this recognition. Your hard work, true respect of people, and drive to actully take action on things that matter are so appreciated. Thank you.

[Mark Hallman @mhallman]

@chadtilbury my serenity is inversely proportional to my expectations or is directly proportional to my level of acceptance

[Mark Hallman @mhallman]

@kevinripa Objective journalism is on life support if not all together dead. I can’t/won't watch TV news. I don’t care what what side they are promoting, CNN or FOX, they are all liars.

[Mark Hallman @mhallman]

@kevinripa It’s an amazing complex issue and we must make big strides to correct things. Rioting, looting, and burning stuff down is not going to help the cause. Many of the people involved the destruction are not protestors trying to affect change, they are being paid to cause chaos.

[SANS DFIR @sansforensics]

#DFIRSummit

https://t.co/kNDuqkeh9G

[Mark Hallman @mhallman]

#dfir

https://t.co/YFuWmAzJOh

[Mark Hallman @mhallman]

@kevinripa That’s outstanding! When does the gasoline powered model come out?

[Lee Whitfield @lee_whitfield]

Something to keep you up to date and learning during your social distancing.

[SANS Institute @SANSInstitute]

For the safety of our students, staff, and instructors, all SANS live events from now until June 1st have been modified. We have our Training Guarantee in place and are working on free resources to support the community. Full statement here: https://t.co/Fvkh0AE1vP

[Mark Hallman @mhallman]

@HeatherMahalik Break a leg! :-).

[Mark Hallman @mhallman]

@sansforensics

Great FOR500 classe with MARFORCYBER!

Congratulations to the challenge winners. One on the most complete presentations I have seen. Nice job!!

[Mark Hallman @mhallman]

https://t.co/RdnXqns8UC

[Mark Hallman @mhallman]

I work w/@robtlee @ SANS. I am having issues with Kansa, specifically Get-Autorunsc.ps1. Do you have time to look @ details? @davehull

[Mark Hallman @mhallman]

@AlanOrlikoski Where is the CyLR.exe? Don’t see it in the zip.