For the morning crowd, @HECFBlog was kind enough to let me play in his DFIR pool: More on mlocated.db - hackingexposedcomputerforens…
2
Replying to @codeslack
@codeslack @HECFBlog It means there's a typo somewhere? I don't find "SMNUL" in the article text...

Mar 6, 2014 · 3:32 PM UTC