Ads.txt Alerts - Protect your revenue

hecfblog.com Ads.txt file

<!DOCTYPE html>
<html dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr' xmlns:og='https://ogp.me/ns#'>
<head>
<link href='https://www.blogger.com/static/v1/widgets/573632073-css_bundle_v2.css' rel='stylesheet' type='text/css'/>

<script async='async' src='https://www.googletagmanager.com/gtag/js?id=G-QEL17KD2DH'></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());

gtag('config', 'G-QEL17KD2DH');
</script>

<meta content='text/html;charset=UTF-8' http-equiv='Content-Type'/>
<meta content='IE=edge,chrome=1' http-equiv='X-UA-Compatible'/>
<link href='https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;900' rel='stylesheet'/>
<link href='//cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick-theme.css' rel='stylesheet' type='text/css'/>
<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
<meta content='blogger' name='generator'/>
<link href='https://www.hecfblog.com/favicon.ico' rel='icon' type='image/x-icon'/>
<link href='https://www.hecfblog.com/' rel='canonical'/>
<link rel="alternate" type="application/atom+xml" title="Hacking Exposed Computer Forensics Blog - Atom" href="https://www.hecfblog.com/feeds/posts/default" />
<link rel="alternate" type="application/rss+xml" title="Hacking Exposed Computer Forensics Blog - RSS" href="https://www.hecfblog.com/feeds/posts/default?alt=rss" />
<link rel="service.post" type="application/atom+xml" title="Hacking Exposed Computer Forensics Blog - Atom" href="https://www.blogger.com/feeds/1466903740262764947/posts/default" />

<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' name='description'/>
<meta content='https://www.hecfblog.com/' property='og:url'/>
<meta content='Hacking Exposed Computer Forensics Blog' property='og:title'/>
<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' property='og:description'/>
<meta content='QzHaIw1wSiO9aDUyKCdT-OC4fr8KFTTa6znAlvgWu8k' name='google-site-verification'/>
<meta charset='utf-8'/>
<meta content='width=device-width, initial-scale=1, maximum-scale=1' name='viewport'/>
<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>
<meta content='blogger' name='generator'/>
<link href='https://www.hecfblog.com/favicon.ico' rel='icon' type='image/x-icon'/>
<link href='https://www.hecfblog.com/' rel='canonical'/>
<link rel="alternate" type="application/atom+xml" title="Hacking Exposed Computer Forensics Blog - Atom" href="https://www.hecfblog.com/feeds/posts/default" />
<link rel="alternate" type="application/rss+xml" title="Hacking Exposed Computer Forensics Blog - RSS" href="https://www.hecfblog.com/feeds/posts/default?alt=rss" />
<link rel="service.post" type="application/atom+xml" title="Hacking Exposed Computer Forensics Blog - Atom" href="https://www.blogger.com/feeds/1466903740262764947/posts/default" />

<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' name='description'/>
<meta content='https://www.hecfblog.com/' property='og:url'/>
<meta content='Hacking Exposed Computer Forensics Blog' property='og:title'/>
<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' property='og:description'/>
<meta content='blogger' name='generator'/>
<meta content='Hacking Exposed Computer Forensics Blog' property='og:title'/>
<meta content='blog' property='og:type'/>
<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' name='description'/>
<meta content='A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen' property='og:description'/>
<meta content='https://www.hecfblog.com/' property='og:url'/>
<meta content='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJdwCaOd2L-Dj6ZgAcWK9H_LyIHThJKgnIjLlHzwKOq60f_gGfMdRJFLwiiBzR93ojkhJH4I6x1UGBr3X_2smt-P2VOBrSuI08YlLzDztCqEQ9TIhAhTkB8C-MgKmOMSA1Nw-NB_2A0R4/s1600/Odd-Themes-Logo.png' property='og:image'/>
<meta content='300' property='og:image:width'/>
<meta content='200' property='og:image:height'/>
<meta content='facebook admins' property='fb:admins'/>
<meta content='facebook app id' property='fb:app_id'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='hi_IN' property='og:locale:alternate'/>

<title>
Hacking Exposed Computer Forensics Blog
</title>
<link href='//maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css' rel='stylesheet'/>
<link href='https://www.blogger.com/static/v1/widgets/1535467126-widget_css_2_bundle.css' rel='stylesheet' type='text/css'/>
<script src='//code.jquery.com/jquery-latest.min.js'></script>
<style id='template-skin-1' type='text/css'></style>
<style id='page-skin-1' type='text/css'></style>
<style>
#main .post-body.entry-content {
font-weight: 400;
}
.wholewrapper {
width: 1200px;
margin: 40px auto 0;
}

.post.hentry {
width: 48%;
padding-bottom: 20px;
}
.post.hentry:nth-child(even){
margin-right:0;
}
.blog-posts.hfeed{
margin-bottom: 30px;
display: flex;
flex-wrap: wrap;
justify-content: space-between;
align-items: flex-start;
}
#wrap2{
margin-top:50px;
}
.hentry .cutter.overlay {
width: 100%;
margin-bottom:25px;
overflow:hidden;
}
</style>
<style>

</style>
<style>
.post-body.entry-content {
line-height:23px;
}

@media only screen and (max-width:768px){
#main-wrapper{
width:620px;
}
.post{
width:620px;
}
.cutter, .post h2{
width:620px;
}
.post img{
width:620px;
}
}
@media only screen and (max-width:600px){
.wholewrapper {
width: 460px!important;
}
#main-wrapper, .post, .post h2, .cutter{
width:460px
}
.post img{
width:460px;
}
}
@media screen and (max-width:480px){
#main-wrapper, .post, .post h2, .cutter{
width:100%;
}
}
@media screen and (max-width:384px){
.post, .post h2{
width:310px;
}

.post img {
width:310px;
}
}
</style>
<script type='text/javascript'>
//<![CDATA[
var relatedTitles=new Array();
var relatedTitlesNum=0;
var relatedUrls=new Array();
var thumburl=new Array();
function related_results_labels_thumbs(json) {
for (var i = 0; i < json.feed.entry.length; i++) {
var entry = json.feed.entry[i];
relatedTitles[relatedTitlesNum] = entry.title.$t;
try {
thumburl[relatedTitlesNum] = entry.gform_foot.url
} catch (error) {
s = entry.content.$t;

a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
thumburl[relatedTitlesNum] = d
} else {

a = s.indexOf("<iframe");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);

var str = d;
var res = str.substring(30, 41);
var fin="http://i.ytimg.com/vi/" + res + "/hqdefault.jpg";

thumburl[relatedTitlesNum] = fin

}

}

if (relatedTitles[relatedTitlesNum].length > 35) relatedTitles[relatedTitlesNum] = relatedTitles[relatedTitlesNum].substring(0, 35) + "...";
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
relatedUrls[relatedTitlesNum] = entry.link[k].href;
relatedTitlesNum++
}
}
}
}

function removeRelatedDuplicates_thumbs() {
var tmp = new Array(0);
var tmp2 = new Array(0);
var tmp3 = new Array(0);
for (var i = 0; i < relatedUrls.length; i++) {
if (!contains_thumbs(tmp, relatedUrls[i])) {
tmp.length += 1;
tmp[tmp.length - 1] = relatedUrls[i];
tmp2.length += 1;
tmp3.length += 1;
tmp2[tmp2.length - 1] = relatedTitles[i];
tmp3[tmp3.length - 1] = thumburl[i]
}
}
relatedTitles = tmp2;
relatedUrls = tmp;
thumburl = tmp3
}

function contains_thumbs(a, e) {
for (var j = 0; j < a.length; j++)
if (a[j] == e) return true;
return false
}

function printRelatedLabels_thumbs() {
for (var i = 0; i < relatedUrls.length; i++) {
if ((relatedUrls[i] == currentposturl) || (!(relatedTitles[i]))) {
relatedUrls.splice(i, 1);
relatedTitles.splice(i, 1);
thumburl.splice(i, 1);
i--
}
}
var r = Math.floor((relatedTitles.length - 1) * Math.random());
var i = 0;
if (relatedTitles.length > 0) document.write('<h2 class="title">' + relatedpoststitle + '</h2>');
document.write('<div class="xjxj" style="clear: both;"/>');
while (i < relatedTitles.length && i < 20 && i < maxresults) {
document.write('<div class="rel-wrap"><a style="text-decoration:none;margin:0 2px 0px 0;');
if (i != 0) document.write('"');
else document.write('"');
document.write(' href="' + relatedUrls[r] + '"><span><img class="related_img" src="' + thumburl[r] + '"/></span><br/><div class="related_title">' + relatedTitles[r] + '</div></a></div>');
if (r < relatedTitles.length - 1) {
r++
} else {
r = 0
}
i++
}
document.write('</div>');
relatedUrls.splice(0, relatedUrls.length);
thumburl.splice(0, thumburl.length);
relatedTitles.splice(0, relatedTitles.length)
}
//]]>
</script>
<script type='text/javascript'>
//<![CDATA[
imgr=new Array();
imgr[0]="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjitQLjEB7-2XAj1Exfnp01bpwAPykSeeBI5hChRc5B-mgli5EdVyAwd3XAn61JZmiPpmlcqJB56pXiaToZqeaVt4fgnQI2Xc4uqV20iqkxP2K-n2E3rB8vlzKnEcF-QtWaW_pXPPuI6fU/s1600/picture_not_available.png";
showRandomImg=true;
aBold=true;
summaryPost=150;
summaryPost1=0;
summaryTitle=15;
numposts=9;
numposts1=6;
numposts2=8;
trendingposts=4;
numposts3=6;
numposts4=5;
numposts5=12;
numposts6=1;
function removeHtmlTag(strx,chop){var s=strx.split("<");for(var i=0;i<s.length;i++){if(s[i].indexOf(">")!=-1){s[i]=s[i].substring(s[i].indexOf(">")+1,s[i].length)}}s=s.join("");s=s.substring(0,chop-1);return s}

function recentarticles2(json) {
j = (showRandomImg) ? Math.floor((imgr.length + 1) * Math.random()) : 0;
img = new Array();
if (numposts <= json.feed.entry.length) {
maxpost = numposts
} else {
maxpost = json.feed.entry.length
}
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var pcm;
var posturl;

var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
}

if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;
break
}
}
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break
}
}
if ("content" in entry) {
var postcontent = entry.content.$t
} else
if ("summary" in entry) {
var postcontent = entry.summary.$t
} else var postcontent = "";
postdate = entry.published.$t;
if (j > imgr.length - 1) j = 0;
img[i] = "";
s = postcontent;
a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
if (i == 0) {
img[i] = '<img min-width="620" min-height="240" class="odd-img" src="' + d + '"/>'
} else {
img[i] = '<img class="alignright" min-height="100" src="' + d + '" width="150"/>'
}
}
var month = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
var month2 = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
var day = postdate.split("-")[2].substring(0, 2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];
for (var u2 = 0; u2 < month.length; u2++) {
if (parseInt(m) == month[u2]) {
m = month2[u2];
break
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 70px;display:block;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 70px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 70px;display:block;"/>'
}

var daystr = day + ' ' + m + ' ' + y;

var trtd = '<div class="yinks_narrow"><div class="thumb overlay">' + p + '</div><div class="postmetainfo"><h4 class="featuredTitle"><a href="' + posturl + '">' + posttitle + '</a></h4> <span class="metainfo"><i class="fa fa-calendar-o"></i> <span class="day">' + daystr + '</span> </span> ' + removeHtmlTag(postcontent, summaryPost1) + '</div></div>';
document.write(trtd)
j++
}
document.write('</div>')
}

function recentarticles67(json) {
j = (showRandomImg) ? Math.floor((imgr.length + 1) * Math.random()) : 0;
img = new Array();
if (trendingposts <= json.feed.entry.length) {
maxpost = trendingposts
} else {
maxpost = json.feed.entry.length
}
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var pcm;
var posturl;
var authorname;

var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
}

if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;
break
}
}
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break
}

}
if ("content" in entry) {
var postcontent = entry.content.$t
} else
if ("summary" in entry) {
var postcontent = entry.summary.$t
} else var postcontent = "";
postdate = entry.published.$t;
if (j > imgr.length - 1) j = 0;
img[i] = "";
s = postcontent;
a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
if (i == 0) {
img[i] = '<img min-width="620" min-height="240" class="alignone" src="' + d + '"/>'
} else {
img[i] = '<img class="alignright" min-height="100" src="' + d + '" width="150"/>'
}
}
var month = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
var month2 = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
var day = postdate.split("-")[2].substring(0, 2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];
for (var u2 = 0; u2 < month.length; u2++) {
if (parseInt(m) == month[u2]) {
m = month2[u2];
break
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 75px;display:block;image-rendering: -webkit-optimize-contrast;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 75px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 75px;display:block;image-rendering: -webkit-optimize-contrast;"/>'
}

var daystr = day + ' ' + m + ' ' + y;

var trtd = '<div class="yinks_narrow"><div class="thumb overlay">' + p + '</div><div class="metaside">'+zz+'<h4 class="featuredTitle"><a href="' + posturl + '">' + posttitle + '</a></h4></div><div class="clear"></div></div>';
document.write(trtd);

j++;
}
document.write('</div>')
}

function preload(json) {
j = (showRandomImg) ? Math.floor((imgr.length + 1) * Math.random()) : 0;
img = new Array();
if (numposts1 <= json.feed.entry.length) {
maxpost = numposts
} else {
maxpost = json.feed.entry.length
}
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var pcm;
var posturl;

var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
}

if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;
break
}
}
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break
}
}
if ("content" in entry) {
var postcontent = entry.content.$t
} else
if ("summary" in entry) {
var postcontent = entry.summary.$t
} else var postcontent = "";
postdate = entry.published.$t;
if (j > imgr.length - 1) j = 0;
img[i] = "";
s = postcontent;
a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
if (i == 0) {
img[i] = '<img min-width="620" min-height="240" class="odd-img" src="' + d + '"/>'
} else {
img[i] = '<img class="alignright" min-height="100" src="' + d + '" width="150"/>'
}
}
var month = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
var month2 = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
var day = postdate.split("-")[2].substring(0, 2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];
for (var u2 = 0; u2 < month.length; u2++) {
if (parseInt(m) == month[u2]) {
m = month2[u2];
break
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}

var daystr = m + ' ' + day + ', ' + y;

if (i == 0) {
var trtd = '<div class="yinks_wide"><div class="thumb overlay">' + p + '</div><div class="topmeta"><div class="featuredPost lastPost"><div class="postmeta">'+zz+' </div> </div></div><div class="clear"></div></div>';
document.write(trtd)
}
j++
}
document.write('</div>')
}

function recentarticles6(json) {
j = (showRandomImg) ? Math.floor((imgr.length + 1) * Math.random()) : 0;
img = new Array();
if (numposts1 <= json.feed.entry.length) {
maxpost = numposts
} else {
maxpost = json.feed.entry.length
}
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var pcm;
var posturl;

var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
}

if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;
break
}
}
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break
}
}
if ("content" in entry) {
var postcontent = entry.content.$t
} else
if ("summary" in entry) {
var postcontent = entry.summary.$t
} else var postcontent = "";
postdate = entry.published.$t;
if (j > imgr.length - 1) j = 0;
img[i] = "";
s = postcontent;
a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
if (i == 0) {
img[i] = '<img min-width="620" min-height="240" class="odd-img" src="' + d + '"/>'
} else {
img[i] = '<img class="alignright" min-height="100" src="' + d + '" width="150"/>'
}
}
var month = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
var month2 = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
var day = postdate.split("-")[2].substring(0, 2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];
for (var u2 = 0; u2 < month.length; u2++) {
if (parseInt(m) == month[u2]) {
m = month2[u2];
break
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 234px;display:block;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 234px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 234px;display:block;"/>'
}

var daystr = m + ' ' + day + ', ' + y;

if (i == 0) {
var trtd = '<div class="yinks_wide left firstpost"><div class="thumb overlay">' + p + '</div><div class="topmeta"><div class="featuredPost lastPost"><div class="postmeta">'+zz+' </div><h3 class="postTitle"><a href="' + posturl + '">' + posttitle + '</a></h3> </div></div><div class="clear"></div></div>';
document.write(trtd)
}
if (i > 0&&i<=5) {
var trtd = '<div class="yinks_wide left other"><div class="thumb overlay">' + p + '</div><div class="topmeta"><div class="featuredPost lastPost"><div class="postmeta">'+zz+' </div><h3 class="postTitle"><a href="' + posturl + '">' + posttitle + '</a></h3> </div></div><div class="clear"></div></div>';
document.write(trtd)
}
j++
}
document.write('</div>')
}

function recentarticles7(json) {
j = (showRandomImg) ? Math.floor((imgr.length + 1) * Math.random()) : 0;
img = new Array();
if (numposts2 <= json.feed.entry.length) {
maxpost = numposts2
} else {
maxpost = json.feed.entry.length;
}
document.write('<div class="articles7-wrap"><div class="articles7">');
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var pcm;
var posturl;

var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>';
}

if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;
break
}
}
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break
}
}
if ("content" in entry) {
var postcontent = entry.content.$t
} else
if ("summary" in entry) {
var postcontent = entry.summary.$t
} else var postcontent = "";
postdate = entry.published.$t;
if (j > imgr.length - 1) j = 0;
img[i] = "";
s = postcontent;
a = s.indexOf("<img");
b = s.indexOf("src=\"", a);
c = s.indexOf("\"", b + 5);
d = s.substr(b + 5, c - b - 5);
if ((a != -1) && (b != -1) && (c != -1) && (d != "")) {
if (i == 0) {
img[i] = '<img min-width="620" min-height="240" class="odd-img" src="' + d + '"/>'
} else {
img[i] = '<img class="alignright" min-height="100" src="' + d + '" width="150"/>'
}
}
var month = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12];
var month2 = ["Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"];
var day = postdate.split("-")[2].substring(0, 2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];
for (var u2 = 0; u2 < month.length; u2++) {
if (parseInt(m) == month[u2]) {
m = month2[u2];
break
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 180px;display:block;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 180px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 180px;display:block;"/>'
}

var daystr = m + ' ' + day + ', ' + y;

var trtd = '<div class="yinks_wide left"><div class="thumb overlay">' + p + '</div><div class="topmetata"><div class="topmeta"><div class="featuredPost lastPost"><div class="postmeta">'+zz+' </div><h3 class="postTitle"><a href="' + posturl + '">' + posttitle + '</a></h3> </div></div></div><div class="clear"></div></div>';
document.write(trtd)

j++
}
document.write('</div>');
document.write('<div class="container23"><button type="button" class="slick-nav slick-prev"><i class="fa fa-angle-left"></i></button><button type="button" class="slick-nav slick-next"><i class="fa fa-angle-right"></i></button></div></div>');
}

//]]>
</script>
<script type='text/javascript'>
//<![CDATA[
imgr = new Array();
imgr[0] = "https://sites.google.com/site/fdblogsite/Home/nothumbnail.gif";
showRandomImg = true;
aBold = true;

summaryTitle = 25;
summaryPost = 200;
summaryPost2 = 150;

numposts = 9;

var classicMode = false;
var summary = 20;
var indent = 3;
imgr = new Array();
imgr[0] = "https://sites.google.com/site/fdblogsite/Home/nothumbnail.gif";
showRandomImg = true;
aBold = true;
summaryPost = 170;
summaryTitle = 25;

numposts1 = 8;

numautonews=10;
numposts3=3;
var classicMode = false;
var summary = 50;
var indent = 3;
var relatedTitles = new Array();
var relatedTitlesNum = 0;
var relatedUrls = new Array();
var thumburl = new Array();
function removeHtmlTag(strx,chop){
var s = strx.split("<");
for(var i=0;i<s.length;i++){
if(s[i].indexOf(">")!=-1){
s[i] = s[i].substring(s[i].indexOf(">")+1,s[i].length);
}
}
s = s.join("");
s = s.substring(0,chop-1);
return s;
}
function showrecentposts(json) {
j = (showRandomImg) ? Math.floor((imgr.length+1)*Math.random()) : 0;
img = new Array();
if (numposts4 <= json.feed.entry.length) {
maxpost = numposts4;
}
else
{
maxpost=json.feed.entry.length;
}
document.write('<div class="slickslider">');
for (var i = 0; i < maxpost; i++) {
var entry = json.feed.entry[i];
var posttitle = entry.title.$t;
var authorname;
var pcm;
var posturl;
var zz;
var cate ='';
for (var e=0; e < json.feed.entry[i].category.length;e++) {
cate = cate + '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a>, ';
zz = '<a href="/search/label/'+json.feed.entry[i].category[e].term+'?max-results=6">'+json.feed.entry[i].category[e].term+'</a> ';
}
if (i == json.feed.entry.length) break;
for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'alternate') {
posturl = entry.link[k].href;

break;
}
}

for (var k = 0; k < entry.link.length; k++) {
if (entry.link[k].rel == 'replies' && entry.link[k].type == 'text/html') {
pcm = entry.link[k].title.split(" ")[0];
break;
}

}

if ("content" in entry) {
var postcontent = entry.content.$t;}
else
if ("summary" in entry) {
var postcontent = entry.summary.$t;}
else var postcontent = "";

postdate = entry.published.$t;

if(j>imgr.length-1) j=0;
img[i] = imgr[j];

s = postcontent ; a = s.indexOf("<img"); b = s.indexOf("src=\"",a); c = s.indexOf("\"",b+5); d = s.substr(b+5,c-b-5);

if((a!=-1)&&(b!=-1)&&(c!=-1)&&(d!="")) img[i] = d;

var month = [1,2,3,4,5,6,7,8,9,10,11,12];
var month2 = ["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];

var day = postdate.split("-")[2].substring(0,2);
var m = postdate.split("-")[1];
var y = postdate.split("-")[0];

for(var u2=0;u2<month.length;u2++){
if(parseInt(m)==month[u2]) {
m = month2[u2] ; break;
}
}

var f = json.feed.entry[i].content.$t;
var l = $("<div>").html(f);
var c = l.find("img:first").attr("src");
if(json.feed.entry[i].media$thumbnail){
var h = json.feed.entry[i].media$thumbnail.url;-1!=h.indexOf("img.youtube.com")&&(h=json.feed.entry[i].media$thumbnail.url.replace("default","maxresdefault"));
h = h.replace('/s72-c/', '/s' + 600 + '/');
}

var noimageurl="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTZRvwURTK7cEhNYOxTTo_j4hYI-hZtumtWUmUeQmtCOwsdBpinx8Ef7uTrIYXiUjiOHK_xuo5NJWcAsz81YXZbN9fwN80UbC2D7ZKuSuWxiK03n6nVJhzyeOrLgR0LPrUsqdy-WOz6wk/s1600/image-not-found-4a963b95bf081c3ea02923dceaeb3f8085e1a654fc54840aac61a57a60903fef.png";
if (c === undefined) {
if(json.feed.entry[i].media$thumbnail)
{
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + h + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}
else{
var p = '<a href="' + posturl + '" class="noimg odd-image" style="background:url(' + noimageurl + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}
} else {
var p = '<a href="' + posturl + '" class="odd-image" style="background:url(' + d + ') no-repeat center center;background-size: cover;width: 100%;height: 480px;display:block;"/>'
}

var daystr = m + ' ' + day + ', ' + y;

var trtd = '<div class="item"><div class="item-wrap"><div class="item-wrap-inner"><div class="item-image">'+p+'</div><div class="itemtopinfo"><div class="item-info"><div class="cat-title">'+zz+'</div><div class="item-title"><a href="'+posturl+'" title="'+posttitle+'" >'+posttitle+'</a><div class="item-description">'+ removeHtmlTag(postcontent, 200) + '</div></div><span class="metaslider"><span class="dayslider"><i class="fa fa-clock-o"></i>'+daystr+'</span><span class="commentslider"><i class="fa fa-commenting"></i>'+pcm+'</span></span></div></div></div></div></div>';

document.write(trtd);

j++;
}
document.write('</div>');
}

//]]>
</script>
<script type='text/javascript'>
$(function()
{
$.fn.scrollToTop = function() {
$(this).hide().removeAttr("href");
if ($(window).scrollTop() != "0")
{
$(this).fadeIn("slow")
}
var scrollDiv = $(this);
$(window).scroll(function()
{
if ($(window).scrollTop() == "0")
{
$(scrollDiv).fadeOut("slow")
}
else
{
$(scrollDiv).fadeIn("slow")
}
});
$(this).click(function()
{
$("html, body").animate({
scrollTop: 0
}, "slow")
})
}
});
$(function()
{
$("#credit").scrollToTop();
});
</script>
<style>

@media only screen and (max-width:1205px) {
div#top-share-buttons{display:none;}
.odd-fwidgets{margin: 20px auto 30px auto;
max-width: 967px;}

}
/* no4 */
@media only screen and (max-width:1205px) and (min-width: 1025px) {

#slider1 {
width: 550px;
}

#boxslider{width:406px;}
.yinks1 .right{width:320px;padding: 0px 10px;}
.yinks1 .left {
width: 330px;}

#head-wrapper23{width:970px;}

.headline,#head-wrapper23{ width: 967px;}

#slot1 img{width:100%;float:right;}
#outer-wrapper, .wholewrapper{width:967px;}

#menu{width:967px;}

.headline-left {
width: 60%;}
#thumb-wrapper{width:100%;}

.topimages {padding-bottom: 0px;}
.box6{width:100%;}
.news_imagez .news_imagez_list li{width: 326px;margin-right:0px;}
.yinks {width: 100%;}
.box .postmeta{bottom:26%;}
.box1 .postmeta{bottom:26%;}
#box .postTitle, #box1 .postTitle, #box19 .postTitle{bottom:26%;}

}
/* no3*/
@media only screen and (max-width:1024px) and (min-width: 768px) {
#thumb-wrapper .yinks_wide.left.firstpost {
width: 100%;
}

.left.firstpost a.odd-image {
height: 300px!important;
}

#thumb-wrapper .yinks_wide.left.firstpost {
height: 300px;
}
.headline a{margin: 5px 5px 0px;}
.socialtop {top: 5px;}
img#Header1_headerimg {
margin: 0 auto;
}
#boxslider{width:100%;}

.yinks1 .right { width: 360px; padding: 0px 10px;}

.yinks1 .left {width: 354px;}

.footer-widgets .box100:last-child {
padding-right: 0;
}
.box100 {padding-right: 4%;
width: 30.6%;}
.footer-widgets { width: 756px;
margin: 0 auto;}
#boxslider{margin-top:0;padding-left: 0;}
.lefttop .slicknav_menu {
padding: 0;
}

.topbar{margin-left:0;}
#head-wrapper23{width:756px;}
#main-wrapper{width:100%;}
.headline-left{max-width:50%;}
#head-wrapper23{padding:0;}
#menu-container{float:left;width: 736px;}
.selectnav{margin-top:14px;}

#slot1 img{width:100%;float:right;}

#menu{width: 724px;}
.selectnav{width:340px;}

#outer-wrapper{width: 756px;}

#slider1{width:100%;}
.part23 .cont.topLists figure{margin-left: 30px;}
.topimages{padding-bottom: 0px;}
#thumb-wrapper{width: 100%;}
#adbox.crosscol.section .widget-content {width: 100%;}
.box6 {width: 100%;}
.widget-content{float:none;width: 100%;}
.box6 h2{float:none;width: 100%;}
.yinks{width:100%;}

.yinks .right{float:right;}

.cont.topLists figure {width: 50%;float: left;position: relative;}
div#HTML3.widget.HTML>.widget-content {width: initial;}
div#HTML13.widget.HTML .widget-content {margin: 0;overflow: hidden;width: 716px;}
.footer-widgets .last {width: 100%;}
.f-widget {width: 100%;}
.box1 .postmeta,.box19 .postmeta{bottom:36%;}
.news_imagez .news_imagez_list li{width: 230px;}
.news_imagez .news_imagez_list li img{min-width: 228px;max-width: 228px;}
.box .postmeta{bottom:36%;}
#box .postTitle, #box1 .postTitle, #box19 .postTitle{bottom:36%;}

}

/* Phone : 480px no2*/
@media only screen and (max-width: 767px) and (min-width: 480px){
#thumb-wrapper .yinks_wide.left.firstpost {
width: 100%;
}
#thumb-wrapper .yinks_wide.left.firstpost {
height: 300px;
}
div#top-social a:hover{color:#000;}
.container23 .slick-prev{width:45.5%!important;}
.box.list .yinks_narrow {
width: 100%;
}

#box .yinks_narrow:nth-child(9), #box .yinks_narrow:nth-child(10) {
border-bottom: 1px solid #eee;
}
.wholewrapper {
max-width: 620px!important;
}
#boxslider {width: 100%;padding-left:0;}

.sb-icon-search { color: #000000;}
div#top-social a{background:#fff;}
.sb-icon-search{font-size:16px;}

.yinks1 .right {
padding: 0;
width: 100%;
padding-top: 20px;
}
#box1 .yinks1 .left { width: 100%;}

#box .yinks_wide.left {
width: 100%;
}
.post.hentry { width: 100%;}
#adbox {
width: initial;
padding: 0 20px;}
footer .container{width:100%}

.headline .slicknav_menu { padding: 11px;}
.sb-search {
display: inline-block;
min-width: 60px;right: 15px;
/* height: 42px; */
top: 0px;
/* right: 0; */}

img#Header1_headerimg {
margin: 0 auto;
}

#slider1{width:100%;float:none;}

#head-wrapper23{padding:0;}

.post-body.entry-content{margin-left:0;}

#slot1 img{ width: 100%;
}

.le_social {
width: 100%;}
#menu-container{float: left;width: 100%;}
.selectnav {margin-top: 14px;width: 200px;}
.footer-widgets .last {width: 100%;}
.f-widget {width: 100%;}

.part23 .topListimages{width:425px;}
img.cover{width:425px;}
.headline-left{width:65%;}
#thumb-wrapper{margin:0;width:100%;max-width: none;}
#box6 {width: 100%;margin: 0;}
.box6 {max-width: none;}
.news_imagez .news_imagez_list li{width: 225px;}
.news_imagez .news_imagez_list li img{width: 225px;}
.box100 {
width: 100%;}
.box100 .yinks1 .left{min-height:initial;}
#sidebar-wrapper{margin:0;float: left;width: 100%;}
.cont.topLists figure {width: 425px;}
body {background: #fff;margin-left: 0;margin-right:0;overflow-x:hidden;margin-top:0px;margin-bottom:0px;}
#head-wrapper23{width:100%;}
#outer-wrapper {}

#f4 { margin-left: 0; margin-right: -20px;width: 100%;}
.footer-widgets {overflow: hidden;padding: 20px 20px 10px 20px;margin: 0 auto;
max-width: 620px;}

.post-body.entry-content,.post h2{margin-left:0;}
.post h2 a {
margin-top: 12px;
}

}

/* Phone : 320px no1 */
@media only screen and (max-width:479px){
.post.hentry h1{font-size:26px;}
#slider1 .item-description {
display: none;
}
.topbar{margin-left:20px;}
.box1 .yinks_wide.firstpost .postTitle a {
font-size: 16px!important;
}
.comments .comments-content .datetime {
float: none;
margin-left: 10px;
}
.rel-wrap {
width: 100%;
margin-right: 0;
margin-bottom: 30px;
}
#related-posts .related_img{height:200px;}
.wholewrapper{ max-width: 360px;}
.box.list .yinks_narrow {
width: 100%;
margin-right: 0;
}
#thumb-wrapper .box1 .yinks_wide.left {
width: 100%!important;
}
#thumb-wrapper .yinks_wide.left.firstpost {
width: 100%;
height: 300px;
}
.container23 .slick-prev,.container23 .slick-next{ width: 43%!important;}
.post h2 {
float: none;
display: inline-block;
width: 100%;
}
.hentry .cutter.overlay {
width: 100%;
}

.topbar{margin-left:0;}
.sb-search {
display: inline-block;
min-width: 60px;right: 15px;
/* height: 42px; */
top: 0px;
/* right: 0; */}

img#Header1_headerimg{margin:0 auto;}
div#slot1 {
width: 100%;
max-width: 100%;
}
.header2 img {
width: 100%;
}
#boxslider {
width: inherit;
margin: 0;
padding-left:0;
}
#boxslider .yinks_narrow{width:100%;}

#box .yinks_narrow:last-child {
float: right;
display: block;
width: 100%;
padding: 0;
margin-top:20px;
}
.box .yinks_wide.left {
width: 100%;
}
#box1 .yinks_wide.left {
width: 100%;
}
.post.hentry {
width: 100%;
padding-right: 0;
}

#adbox {
width: initial;
padding: 0 20px;}
footer .container{width:100%}

.footer-widgets{padding: 0;
max-width: 300px;
margin: 0 auto;
}

#slider1{width:100%;}
body{margin-top:0px;margin-bottom:0px;}
.box100 {
width: 100%;}
#head-wrapper23{padding:0;}
#h8:after{top:7px;}

#box .postTitle, #box1 .postTitle, #box19 .postTitle,.box .postmeta,.box1 .postmeta{bottom:26%;}

.post-body.entry-content,.post h2{margin-left:0;}

.post h2 a {
margin-top: 12px;
}
#menu-container{margin-top:40px;}
.headline .slicknav_menu .slicknav_icon {
margin-top: 20px;
}
.headline{
max-width: 350px;
margin: 0 auto!important;
}
.headline-left {max-width: 50%;}
.box100 .yinks1 .left{min-height:initial;}
#menu-container{width:100%;}
#menu {width: 100%;}
.selectnav{margin-top:14px;}
.le_social{float:left;width:100%;}
body {background: #fff;margin-left: 0;margin-right:0;overflow-x:hidden;}

#credit .left{margin-top: 10px;}

#main-wrapper{max-width: none;width:100%;}
#sidebar-wrapper{width: 100%;margin-right: 0;margin-left: 0;}
#box6{width:100%;}
.news_imagez .news_imagez_list{margin-right:0;margin-left: 25px;}
#f4{margin-left: 0px;margin-right: 0px;}

.footer-widgets h2 {font-size: 15px;}
blockquote{padding: 15px 10px 20px 20px;}
.post blockquote {margin-left: 0;}
}

</style>
<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1466903740262764947&zx=fe1119f7-03f7-4acd-bf21-9878c61e3dd0' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1466903740262764947&zx=fe1119f7-03f7-4acd-bf21-9878c61e3dd0' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-2405736339290375&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>



<script type="text/javascript" language="javascript">
// Supply ads personalization default for EEA readers
// See https://www.blogger.com/go/adspersonalization
adsbygoogle = window.adsbygoogle || [];
if (typeof adsbygoogle.requestNonPersonalizedAds === 'undefined') {
adsbygoogle.requestNonPersonalizedAds = 1;
}
</script>

<link rel="stylesheet" href="https://fonts.googleapis.com/css2?display=swap&family=Noto+Sans+JP"></head>
<body>
<div id='fb-root'></div>
<script>
//<![CDATA[
(function(d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id)) return;
js = d.createElement(s); js.id = id;
js.src = "//connect.facebook.net/en_US/sdk.js#xfbml=1&version=v2.5&appId=778800582250308";
fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));

!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0],p=/^http:/.test(d.location)?'http':'https';if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src=p+'://platform.twitter.com/widgets.js';fjs.parentNode.insertBefore(js,fjs);}}(document, 'script', 'twitter-wjs');

//]]>
</script>
<div class='headline-wrapper'>
<div class='headline'>
<div class='section' id='pages-top'><div class='widget HTML' data-version='1' id='HTML64'>
<div class='clear'></div>
</div></div>
<div class='le_social'>
<div class='top-bar'>
<div class='sb-search' id='sb-search'>
<form action='/search' method='get' role='search'>
<span class='hiddenn'><input class='sb-search-input' id='search' name='q' placeholder='Type and hit enter' type='search' value=''/><input class='sb-search-submit' type='submit' value='Submit'/>
</span>
<span class='sb-icon-search'></span>
</form>
</div>
</div>
</div>
</div>
<div style='clear:both;'></div>
</div>
<div id='head-wrapper23'>
<div class='headerwrap'>
<div class='header section' id='header'><div class='widget Header' data-version='1' id='Header1'>
<div id='head-inner'>
<a href='https://www.hecfblog.com/' style='display: block'>
<img alt='Hacking Exposed Computer Forensics Blog' height='84px; ' id='Header1_headerimg' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV1r9Fx_K3sKHfI8wnPUPPQFkxWhuxayNz8tT11sG8lYQgY1gGiwV9Qdlfeq-b80FMkRdsOwimMVCo2VbnE0aXyGxaTX1YYhUB5IZ4yK1LhASjfZxFmkAstIM9DnylPabPqQ15WEAFysbZ/s384/unnamed.png' style='display: block' width='384px; '/>
</a>
</div>
</div></div>

<div class='topbar'>
<div class='rapper'>
<div class='lefttop'>
<nav id='navtop'>
<div class='section' id='main-menu-bar'><div class='widget HTML' data-version='1' id='HTML4'>
<ul class='topmenu1'>
<li><a href='https://www.hecfblog.com/search/label/extended%20mapi'>Extended Mapi</a></li>
<li><a href='https://www.hecfblog.com/search/label/objectid'>ObjectID</a></li>
<li><a href='https://www.hecfblog.com/search/label/amcache'>Amcache</a></li>
<li><a href='https://www.hecfblog.com/search/label/ctf'>CTF</a></li>
<li><a href='https://www.hecfblog.com/search/label/python'>Python</a></li>
<li><a href='https://www.hecfblog.com/search/label/syscache'>Syscache</a></li>


<li class="dropdown">
<a href="https://www.hecfblog.com/search/label/Daily%20Blog?max-results=6" class="dropbtn">Daily Blogs</a>
<ul class="dropdown-content">
<li><a href='https://www.hecfblog.com/search/label/Saturday%20reading'>Saturday Reading</a></li>
<li><a href='https://www.hecfblog.com/search/label/solution%20saturday'>Solution Saturday</a></li>
<li><a href='https://www.hecfblog.com/search/label/forensic%20lunch?&max-results=8'>Forensic Lunch</a></li>
<li><a href='https://www.hecfblog.com/search/label/sunday%20funday?&max-results=8'>Sunday Funday</a></li>

</ul>
</li>
</ul>
<div class='clear'></div>
</div></div>
</nav>
</div>
</div>
</div>
<div class='socialtop'>
<div id='top-social'>
<div class='section' id='top-social-icons'><div class='widget HTML' data-version='1' id='HTML5'>


<a class='social-tw' href=' https://twitter.com/hecfblog?lang=en' target='_blank'><i class='fa fa-twitter'/></i></a>

<a class='social-yt' href='https://www.youtube.com/user/LearnForensics' target='_blank'><i class='fa fa-youtube'/></i></a>

<a class='social-tw' href=' https://www.linkedin.com/in/dcowen/ ' target='_blank'><i class='fa fa-linkedin'/></i></a>
<div class='clear'></div>
</div></div>
</div>
</div>
</div>
</div>
<div id='outer-wrapper'>
<div id='wrap2'>
<div id='content-wrapper'>
<div class='clear'></div>
<div class='section' id='slider1'><div class='widget HTML' data-version='1' id='HTML25'>
<div class='preload'>
<script>
document.write("<script src=\"/feeds/posts/default/-/Daily%20Blog?max-results="+1+"&orderby=published&alt=json-in-script&callback=preload\"><\/script>");
</script>
</div>
<script>
document.write("<script src=\"/feeds/posts/default/-/Daily%20Blog?max-results="+numposts4+"&orderby=published&alt=json-in-script&callback=showrecentposts\"><\/script>");
</script>
</div></div>
<div class='box1 section' id='boxslider'><div class='widget HTML' data-version='1' id='HTML49'>
<div>
<h2 class='title'>
This Week's/Trending Posts
</h2>
</div>
<div class='widget-content'>
<div class='yinks1'>
<script>
document.write("<script src=\"/feeds/posts/default/-/Daily%20Blog?max-results="+trendingposts+"&orderby=published&alt=json-in-script&callback=recentarticles67\"><\/script>");
</script>
</div>
</div>
<div class='clear'></div>
</div></div>
<div class='box1 section' id='box19'><div class='widget HTML' data-version='1' id='HTML99'>
<h2 class='title'>
Solution Saturday Series
</h2>
<div class='widget-content'>
<div class='yinks1'>
<script>
document.write("<script src=\"/feeds/posts/default/-/solution%20saturday?max-results="+numposts2+"&orderby=published&alt=json-in-script&callback=recentarticles7\"><\/script>");
</script>
</div>
</div>
<div class='clear'></div>
</div></div>
<div id='thumb-wrapper'>
<div class='box1 section' id='box1'><div class='widget HTML' data-version='1' id='HTML9'>
<h2 class='title'>
Sunday Funday Series
</h2>
<div class='widget-content'>
<div class='yinks1'>
<script>
document.write("<script src=\"/feeds/posts/default/-/sunday%20funday?max-results=5&orderby=published&alt=json-in-script&callback=recentarticles6\"><\/script>");
</script>
</div>
</div>
<div class='clear'></div>
</div></div>
<div class='slot2 section' id='slot2'><div class='widget HTML' data-version='1' id='HTML10'>
<div class='widget-content'>
<a href="https://www.crai.com/our-people/david-cowen/"><img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFERRSg9JG3mxH6nq52FaFtnRmSUAueDdKce6Hsc6gyRnDJ5RgzUO6RrQkt1lXtyrVd94Vm2JnHj7TQIEISvpVFowrjdUFhouyDVjgCxNXzsCnB5WwbFnvPJvKtjuVJx6_Otj63yG7Sp-oCOjQ6PyNYXnS1hhI-8ENblsKnH9UR7AO-vbVHOQYXHTcNw/s16000/Google.png"/></a>
</div>
<div class='clear'></div>
</div></div>
<div class='box list section' id='box'><div class='widget HTML' data-version='1' id='HTML8'>
<h2 class='title'>
Forensic Lunch
</h2>
<div class='widget-content'>
<div class='yinks1'>
<script>
document.write("<script src=\"/feeds/posts/default/-/forensic%20lunch?max-results="+numposts+"&orderby=published&alt=json-in-script&callback=recentarticles2\"><\/script>");
</script>
</div>
</div>
<div class='clear'></div>
</div></div>
</div>
<script src='//cdn.jsdelivr.net/jquery.slick/1.5.9/slick.min.js' type='text/javascript'></script>
<script>//<![CDATA[

$('.slickslider').slick({
dots: true,
infinite: true,
speed: 350,
autoplay: true,
autoplaySpeed: 5000,
slidesToShow: 1,
lazyLoad: 'ondemand',
slidesToScroll: 1,
prevArrow: '<button type="button" class="slick-nav slick-prev"><i class="fa fa-angle-left"></i></button>',
nextArrow: '<button type="button" class="slick-nav slick-next"><i class="fa fa-angle-right"></i></button>',
arrows:false,
fade: true,
cssEase: 'linear',
responsive: [
{
breakpoint: 1024,
settings: {
slidesToShow: 1,
slidesToScroll: 1,
}
},
{
breakpoint: 767,
settings: {
slidesToShow: 1,
slidesToScroll: 1,
}
},
{
breakpoint: 480,
settings: {
slidesToShow: 1,
slidesToScroll: 1,
}
}
]
});

//]]>
</script>
<div class='wholewrapper'>
<div id='main-wrapper'>
<div class='somediv'>
<div class='box recent section' id='recent'><div class='widget HTML' data-version='1' id='HTML85'>
<h2 class='title'>
The Most/Recent Articles
</h2>
<div class='clear'></div>
</div></div>
<div class='main section' id='main'><div class='widget Blog' data-version='1' id='Blog1'>
<div class='blog-posts hfeed'>
<div class='post hentry'>
<a name='2226304036736687516'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5GWh0tXGteqxfrTQFDzW2kMooGHcwNkA6h9f_bfBDpsRMJtvg0UR1SHfIqx4UYxViUSiLEJFeWq9SryUdFz5gwlrOlXEFCZDoNnqRlbU3pn_lGfYxr60W3HgTAXc7b3IqLHYN3F0kW72JbkCoEID0IEVH-rls7Q1LRd_0awNugK97uT7EDxugHyuXvFM/s320/forgive.png","Daily Blog #815: I missed a day","https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/woops?&max-results=7'>woops</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>
Daily Blog #815: I missed a day
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary2226304036736687516'>
<p><span style="font-family: Noto Sans JP;"> </span></p><div class="separator" style="clear: both; text-align: center;"><span style="font-family: Noto Sans JP;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5GWh0tXGteqxfrTQFDzW2kMooGHcwNkA6h9f_bfBDpsRMJtvg0UR1SHfIqx4UYxViUSiLEJFeWq9SryUdFz5gwlrOlXEFCZDoNnqRlbU3pn_lGfYxr60W3HgTAXc7b3IqLHYN3F0kW72JbkCoEID0IEVH-rls7Q1LRd_0awNugK97uT7EDxugHyuXvFM/s1024/forgive.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1024" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5GWh0tXGteqxfrTQFDzW2kMooGHcwNkA6h9f_bfBDpsRMJtvg0UR1SHfIqx4UYxViUSiLEJFeWq9SryUdFz5gwlrOlXEFCZDoNnqRlbU3pn_lGfYxr60W3HgTAXc7b3IqLHYN3F0kW72JbkCoEID0IEVH-rls7Q1LRd_0awNugK97uT7EDxugHyuXvFM/s320/forgive.png" width="320" /></a></span></div><span style="font-family: Noto Sans JP;"><br /></span><p></p><p><span style="font-family: Noto Sans JP;">Hello Reader,</span></p><p><span style="font-family: Noto Sans JP;">It happens to everyone and yesterday it happened to me. I was traveling and lost track of the day and realized I didn't post a blog yesterday. I just want to acknowledge it so you know a couple things. </span></p><p><span style="font-family: Noto Sans JP;"><br /></span></p><p><span style="font-family: Noto Sans JP;">1. It's ok to make a mistake</span></p><p><span style="font-family: Noto Sans JP;">2. Just because I missed a day doesn't mean that I won't stop posting, just means I missed a day. </span></p><p><span style="font-family: Noto Sans JP;">3. I'm human just like everyone else.</span></p><p><span style="font-family: Noto Sans JP;"><br /></span></p><p><span style="font-family: Noto Sans JP;">So take your mistakes in stride and realize that everyone will make them. Enjoy your life and don't let minor mistakes derail you from making your goals! I'm doing this mainly to keep pushing myself to keep learning, researching and sharing. The fact that you all are here and reading this with me just makes it that much better. </span></p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary2226304036736687516");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='6903355493241453028'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS4Zw9KQkjNkc2JCwa0rDb1zPUCypCWZgocTE2voitZGOwzeZ2L_4D63LJ0j9JPosWO-nLahPLJYL-tsQMEgmfVhxmjpJ6Smn6FKVk2_JhClTq_WWhvcE13R76fsdeVWnJb-lPNFnJnif0HpOq-5yuADLWqHUQjQG4zpbLb46P0PM-dvHaM9rsb-D39qs/s320/sundayfunday.png","Daily Blog #814: Sunday Funday 4/20/25","https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/timestamps?&max-results=7'>timestamps</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>
Daily Blog #814: Sunday Funday 4/20/25
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary6903355493241453028'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS4Zw9KQkjNkc2JCwa0rDb1zPUCypCWZgocTE2voitZGOwzeZ2L_4D63LJ0j9JPosWO-nLahPLJYL-tsQMEgmfVhxmjpJ6Smn6FKVk2_JhClTq_WWhvcE13R76fsdeVWnJb-lPNFnJnif0HpOq-5yuADLWqHUQjQG4zpbLb46P0PM-dvHaM9rsb-D39qs/s640/sundayfunday.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="360" data-original-width="640" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS4Zw9KQkjNkc2JCwa0rDb1zPUCypCWZgocTE2voitZGOwzeZ2L_4D63LJ0j9JPosWO-nLahPLJYL-tsQMEgmfVhxmjpJ6Smn6FKVk2_JhClTq_WWhvcE13R76fsdeVWnJb-lPNFnJnif0HpOq-5yuADLWqHUQjQG4zpbLb46P0PM-dvHaM9rsb-D39qs/s320/sundayfunday.png" width="320" /></a></div><br /><p></p><p><span style="font-family: Noto Sans JP;">Hello Reader, </span></p><p><span style="font-family: Noto Sans JP; font-size: large;">It's an Eng world and we are just living in it, unless of course you take the time to put in an entry this week and win! This week we are changing courses to an old file system problem with some utilities. <br /></span></p><div dir="ltr" style="border: 0px; caret-color: rgb(85, 85, 85); color: #555555; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 900; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><b style="background-color: white; border: 0px; box-sizing: border-box; color: #616161; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;">The Prize:</b></span></div><div dir="ltr" style="border: 0px; caret-color: rgb(85, 85, 85); color: #555555; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 900; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="font-family: Noto Sans JP; font-size: large;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="border: 0px; color: #616161; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><b style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><br /></b></span><span style="background-color: white; border: 0px; box-sizing: border-box; color: #616161; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;">$100 Amazon Giftcard</span></span><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><br /><br style="background-color: white; box-sizing: border-box; color: #616161; line-height: 17.28px; position: relative;" /><b style="background-color: white; border: 0px; box-sizing: border-box; color: #616161; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;"> </b></span></span></div><div dir="ltr" style="border: 0px; caret-color: rgb(85, 85, 85); color: #555555; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 900; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="font-family: Noto Sans JP; font-size: large;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><b style="background-color: white; border: 0px; box-sizing: border-box; color: #616161; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;">The Rules:</b><br /><br /></span></span><ol style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style-image: none; list-style-position: outside; margin: 0px; padding: 0px 0px 0px 50px; position: relative; vertical-align: baseline;"><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">You must post your answer before Friday 4/25/25 7PM CST (GMT -6)</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">The most complete answer wins</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">You are allowed to edit your answer after posting</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">If two answers are too similar for one to win, the one with the earlier posting time wins</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">Be specific and be thoughtful</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">Anonymous
entries are allowed, please email them to dlcowen@gmail.com. Please
state in your email if you would like to be anonymous or not if you win.</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post</span></li><li style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: 1.6em; list-style: inherit; margin: 0px; padding: 0px 0px 0px 5px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;">AI assistance is welcomed but if a post is deemed to be entirely AI written it will not qualify for a prize. </span></li></ol><div style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; position: relative; vertical-align: baseline;"><b style="border: 0px; box-sizing: border-box; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><br style="box-sizing: border-box; position: relative;" /></span></b></div><div style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; position: relative; vertical-align: baseline;"><b style="border: 0px; box-sizing: border-box; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;"><span style="border: 0px; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><br style="box-sizing: border-box; position: relative;" /></span></b></div><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; font-weight: normal; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;">The Challenge:</span></span></div><p><span style="font-family: Noto Sans JP;">FAT32 does not store a time stamp for access dates, it only records the date. However many tools have or have in the past actually treated the zero time entry as a real time entry and adjusted it for time zones. Test your favorite tools such as , ftk imager, xways, axiom, encase, autopsy your choice but you must submit at least two and show if they are correctly handling FAT32 timestamps. <br /></span></p><p> </p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary6903355493241453028");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='8842621472740222360'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi60iLy5WiSNWWSyeIoM9JsOK9Xwv5L7GT5g4NxBmdQwyQNbbHzgWoiG4FbwefVVrqg1yDaz0ripRAlyXSWNX4xJ3tACOcH7a0_YyoPVT2XMPnI2-0aE3gKc9hJWhMWYqDWlTUDM2XM3DEHiJB5Z1iSrtjQeP0qG5xKxmt4RewUfbqA0FR7cw1DXPwxYNM/s320/solutionsaturday.png","Daily Blog #813: Solution Saturday 4/19/25","https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/sunday%20funday?&max-results=7'>sunday funday</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>
Daily Blog #813: Solution Saturday 4/19/25
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary8842621472740222360'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi60iLy5WiSNWWSyeIoM9JsOK9Xwv5L7GT5g4NxBmdQwyQNbbHzgWoiG4FbwefVVrqg1yDaz0ripRAlyXSWNX4xJ3tACOcH7a0_YyoPVT2XMPnI2-0aE3gKc9hJWhMWYqDWlTUDM2XM3DEHiJB5Z1iSrtjQeP0qG5xKxmt4RewUfbqA0FR7cw1DXPwxYNM/s640/solutionsaturday.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="360" data-original-width="640" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi60iLy5WiSNWWSyeIoM9JsOK9Xwv5L7GT5g4NxBmdQwyQNbbHzgWoiG4FbwefVVrqg1yDaz0ripRAlyXSWNX4xJ3tACOcH7a0_YyoPVT2XMPnI2-0aE3gKc9hJWhMWYqDWlTUDM2XM3DEHiJB5Z1iSrtjQeP0qG5xKxmt4RewUfbqA0FR7cw1DXPwxYNM/s320/solutionsaturday.png" width="320" /></a></div><br /><p></p><p><span style="font-family: Noto Sans JP;">Hello Reader, </span></p><p><span style="font-family: Noto Sans JP;">Another week has come and gone but Chris Eng's streak continues unbroken! It's up to all of you to decide if you are ready to step up to the challenge tomorrow for this weeks challenge!</span></p><p><span style="font-family: Noto Sans JP;"> </span></p><div dir="ltr" style="border: 0px; caret-color: rgb(85, 85, 85); color: #555555; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-variant-alternates: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variation-settings: inherit; font-weight: 900; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: Noto Sans JP; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: inherit; padding: 0px; vertical-align: baseline;"><span style="border: 0px; box-sizing: border-box; font-feature-settings: inherit; font-kerning: inherit; font-optical-sizing: inherit; font-size-adjust: inherit; font-size: large; font-stretch: inherit; font-style: inherit; font-variant-alternates: inherit; font-variant-caps: inherit; font-variant-east-asian: inherit; font-variant-ligatures: inherit; font-variant-numeric: inherit; font-variant-position: inherit; font-variant: inherit; font-variation-settings: inherit; line-height: 17.28px; padding: 0px; position: relative; vertical-align: baseline;">The Challenge:</span></span></div><p><span style="font-family: Noto Sans JP;">It's
becoming more common that the first thing an attacker will try to do if
they get access to a user's system is extract all of the saved browser
passwords. Profile a popular browser password extractor (such as <a href="https://www.nirsoft.net/utils/web_browser_password.html" target="_blank">WebBroweerPassView</a> or <a href="https://github.com/moonD4rk/HackBrowserData" target="_blank">HackBrowserData</a>) and detail what artifacts are left behind that would reveal their usage on a Windows 11 system. Extra points if you:<br />a. Try multiple browser password viewing tools<br />b. Try MacOS as well as Windows</span></p><p><span style="font-family: Noto Sans JP;"> </span></p><p><b style="font-family: Noto Sans JP;">The Winning Answer:</b></p><p><span style="font-family: Noto Sans JP;">Chris Eng / Ogmini Blog</span></p><p><span style="font-family: Noto Sans JP;"> <a href="https://ogmini.github.io/2025/04/14/David-Cowen-Sunday-Funday-Browser-Password-Extraction.html">https://ogmini.github.io/2025/04/14/David-Cowen-Sunday-Funday-Browser-Password-Extraction.html</a></span></p><p><span style="font-family: Noto Sans JP;"><a href="https://ogmini.github.io/2025/04/15/LaZagne-Artifacts.html">https://ogmini.github.io/2025/04/15/LaZagne-Artifacts.html</a></span></p><p><span style="font-family: Noto Sans JP;"><a href="https://ogmini.github.io/2025/04/16/WebBrowserPassView-Artifacts.html">https://ogmini.github.io/2025/04/16/WebBrowserPassView-Artifacts.html</a></span></p><p><span style="font-family: Noto Sans JP;"><a href="https://ogmini.github.io/2025/04/18/HackBrowserData-Artifacts.html">https://ogmini.github.io/2025/04/18/HackBrowserData-Artifacts.html</a> <br /></span></p><p> <br /></p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary8842621472740222360");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='6610253545704900743'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK3OAgdGTujkTy5X-nM4364yuWc8TJa-ct4GGE-Phw3vdXX9DApDT_kRhIvjELWVYLvnTPIrJTGFuz2hhkhVoklmY6bixe4fypY1X1A8RuJgAoPUUK597HYTBKVrOgLMn11x2g6b0azfhNnVv7CE6p-ZZRcfmAnaIIB-RNEBL_rIakVyr80MUyDhMQGgI/s320/removefromgroup.png","Daily Blog #812: Testing AWS Log latency - Removing Users from Groups","https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/removeuserfromgroup?&max-results=7'>removeuserfromgroup</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>
Daily Blog #812: Testing AWS Log latency - Removing Users from Groups
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary6610253545704900743'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK3OAgdGTujkTy5X-nM4364yuWc8TJa-ct4GGE-Phw3vdXX9DApDT_kRhIvjELWVYLvnTPIrJTGFuz2hhkhVoklmY6bixe4fypY1X1A8RuJgAoPUUK597HYTBKVrOgLMn11x2g6b0azfhNnVv7CE6p-ZZRcfmAnaIIB-RNEBL_rIakVyr80MUyDhMQGgI/s1024/removefromgroup.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1024" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK3OAgdGTujkTy5X-nM4364yuWc8TJa-ct4GGE-Phw3vdXX9DApDT_kRhIvjELWVYLvnTPIrJTGFuz2hhkhVoklmY6bixe4fypY1X1A8RuJgAoPUUK597HYTBKVrOgLMn11x2g6b0azfhNnVv7CE6p-ZZRcfmAnaIIB-RNEBL_rIakVyr80MUyDhMQGgI/s320/removefromgroup.png" width="320" /></a></div><br /><p></p><p> </p><p><b style="font-family: Noto Sans JP;">Hello Reader,</b></p>

<p><span style="font-family: Noto Sans JP;">Welcome back to another installment in the <b>AWS CloudTrail speed test series</b>. Today’s focus shifts to the opposite of yesterday’s action: <code>RemoveUserFromGroup</code>. This event is triggered when you revoke permissions by removing an IAM user from a group.</span></p>

<h3><span style="font-family: Noto Sans JP;">Fifth Test: AWS <code>RemoveUserFromGroup</code> Event</span></h3>

<p><span style="font-family: Noto Sans JP;">For this test, I removed a user from an existing IAM group, which typically results in an immediate change to their permission set. As with all IAM actions, the key question remained: <b>how long will it take for CloudTrail to log it?</b> And in which region?</span></p>

<p><span style="font-family: Noto Sans JP;">Since <b>IAM is a global service</b>, the event should appear in the <code>us-east-1</code> region, just like all prior IAM tests we've run. To confirm, I initiated the action and started the stopwatch.</span></p>

<h3><span style="font-family: Noto Sans JP;">Results</span></h3>

<p><span style="font-family: Noto Sans JP;">Sure enough, the <code>RemoveUserFromGroup</code> event appeared in <code>us-east-1</code> after just <b>1 minute and 45 seconds</b>.</span></p>

<p><span style="font-family: Noto Sans JP;">Once again, CloudTrail continues to deliver IAM-related logs <b>well within SLA expectations</b>:</span></p>

<ul>
<li><span style="font-family: Noto Sans JP;"><b>Faster</b> than AWS’s 15-minute SLA</span></li>
<li><span style="font-family: Noto Sans JP;"><b>Close to their 5-minute goal</b> for critical events</span></li>
</ul>

<h3><span style="font-family: Noto Sans JP;">Coming Up</span></h3>

<p><span style="font-family: Noto Sans JP;">In tomorrow’s post, I’ll be testing something a little more involved: <b>creating and attaching an inline policy to a user</b>. Can CloudTrail keep up? We’ll find out—stay tuned!</span></p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary6610253545704900743");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='8631828042274838536'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitgwVMjukTzCuo_bdlGs6epwr95Xl8x8_1MJt_djP4ZVpHlyf15v6pNOYVIhyphenhyphenEO0Tplcb2BMczNRo7gwcMaWeS0T64eGqUHQuini6o_dnTYA9dLg8oWfo4tJQD8i2ba_PZh3jQG6k_fgY_n86V6LkpQq2FQx4RO44Mvptg6TjE3V7-fs21BSiYgNXb2xk/s320/addusertogrou%5Bp.png","Daily Blog #811: Testing AWS Log latency - Modifying User Permissions","https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/log%20delay?&max-results=7'>log delay</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html'>
Daily Blog #811: Testing AWS Log latency - Modifying User Permissions
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary8631828042274838536'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitgwVMjukTzCuo_bdlGs6epwr95Xl8x8_1MJt_djP4ZVpHlyf15v6pNOYVIhyphenhyphenEO0Tplcb2BMczNRo7gwcMaWeS0T64eGqUHQuini6o_dnTYA9dLg8oWfo4tJQD8i2ba_PZh3jQG6k_fgY_n86V6LkpQq2FQx4RO44Mvptg6TjE3V7-fs21BSiYgNXb2xk/s1536/addusertogrou%5Bp.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1536" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitgwVMjukTzCuo_bdlGs6epwr95Xl8x8_1MJt_djP4ZVpHlyf15v6pNOYVIhyphenhyphenEO0Tplcb2BMczNRo7gwcMaWeS0T64eGqUHQuini6o_dnTYA9dLg8oWfo4tJQD8i2ba_PZh3jQG6k_fgY_n86V6LkpQq2FQx4RO44Mvptg6TjE3V7-fs21BSiYgNXb2xk/s320/addusertogrou%5Bp.png" width="320" /></a></div><br /><p></p><br /><p><b style="font-family: Noto Sans JP;">Hello Reader,</b></p>

<p><span style="font-family: Noto Sans JP;">Continuing our series on <b>AWS CloudTrail speed tests</b>, today’s test focuses on a new IAM-related action: <code>AddUserToGroup</code>. This event is generated when you modify a user’s permissions by assigning them to an IAM group which would grant additional permissions.</span></p>

<h3><span style="font-family: Noto Sans JP;">Fourth Test: AWS <code>AddUserToGroup</code> Event</span></h3>

<p><span style="font-family: Noto Sans JP;">Today’s scenario involved changing account permissions by adding an IAM user to a group. This is a common way to grant new permissions via group policies. Once the user was added to the group, the <code>AddUserToGroup</code> event was expected to show up in CloudTrail.</span></p>

<p><span style="font-family: Noto Sans JP;">Just like previous IAM tests, this raised the question: <b>which region would the event appear in?</b> Since IAM is a <b>global service</b>, AWS documents that such activity will be logged in the <code>us-east-1</code> region, regardless of where the API call originates.</span></p>

<h3><span style="font-family: Noto Sans JP;">Results</span></h3>

<p><span style="font-family: Noto Sans JP;">After initiating the action and starting the stopwatch, the <code>AddUserToGroup</code> event appeared in <code>us-east-1</code> exactly <b>2 minutes</b> later.</span></p>

<p><span style="font-family: Noto Sans JP;">This result is consistent with our prior IAM tests, and once again demonstrates that CloudTrail logs IAM events well within the official AWS SLA:</span></p>

<ul>
<li><span style="font-family: Noto Sans JP;"><b>Faster</b> than the 15-minute SLA</span></li>
<li><span style="font-family: Noto Sans JP;"><b>Faster</b> than the 5-minute “goal” for critical events but slower than the other events we've looked at</span></li>
</ul>

<h3><span style="font-family: Noto Sans JP;">Coming Up</span></h3>

<p><span style="font-family: Noto Sans JP;">In tomorrow’s post, I’ll continue testing IAM activity—next up: <b>removing a user from a group</b>. Stay tuned to see if the performance holds!</span></p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary8631828042274838536");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='2056651770150436444'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-810-testing-aws-log-latency.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgpSgNkQ6a3UDSsjKwpwiRloou-ibK6ojvaESBhGoyumNYFBaNonccCj4P_iyH13rx7i_k4-9InDqr2-7DgHpkaGMHQT7BoZjWaOS8l-t7-YWHvX4_NYdnaFHIgxJJAENUq-CBDH9MDJ_flp5PrecK85Arj93cH-PDH6Rs_bzC2S3-M5OacYILzWjoGAs/s320/createuser.png","Daily Blog #810: Testing AWS Log latency - CreateUser","https://www.hecfblog.com/2025/04/daily-blog-810-testing-aws-log-latency.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/log%20delay?&max-results=7'>log delay</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-810-testing-aws-log-latency.html'>
Daily Blog #810: Testing AWS Log latency - CreateUser
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary2056651770150436444'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgpSgNkQ6a3UDSsjKwpwiRloou-ibK6ojvaESBhGoyumNYFBaNonccCj4P_iyH13rx7i_k4-9InDqr2-7DgHpkaGMHQT7BoZjWaOS8l-t7-YWHvX4_NYdnaFHIgxJJAENUq-CBDH9MDJ_flp5PrecK85Arj93cH-PDH6Rs_bzC2S3-M5OacYILzWjoGAs/s1536/createuser.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1536" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgpSgNkQ6a3UDSsjKwpwiRloou-ibK6ojvaESBhGoyumNYFBaNonccCj4P_iyH13rx7i_k4-9InDqr2-7DgHpkaGMHQT7BoZjWaOS8l-t7-YWHvX4_NYdnaFHIgxJJAENUq-CBDH9MDJ_flp5PrecK85Arj93cH-PDH6Rs_bzC2S3-M5OacYILzWjoGAs/s320/createuser.png" width="320" /></a></div><br /><p></p><p><b>Hello Reader,</b></p>

<p>Continuing from yesterday’s post, it's time for another <b>AWS CloudTrail speed test</b>. Today, I’m examining the <code>CreateUser</code> event, which is triggered when a new IAM user is created in an AWS account.</p>

<h3>Third Test: AWS <code>CreateUser</code> Event</h3>

<p>Going into this test, I knew that IAM events which are global are logged in <code>us-east-1</code>. It’s often the default region for global events and appears first in AWS region lists. To be thorough, I also checked <code>us-east-2</code> just in case.</p>

<h3>Results</h3>

<p>After creating the user and starting a timer, the <code>CreateUser</code> event appeared in <code>us-east-1</code> after approximately <b>2 minutes</b>. That’s slightly longer than the <code>ConsoleLogin</code> and <code>CreateAccessKey</code> tests, but still well within AWS’s official timelines.</p>

<p>The delivery was:</p>

<ul>
<li><b>Faster</b> than the 15-minute SLA</li>
<li><b>Faster </b>than the 5 minute goal</li>
</ul>

<h3>Coming Up</h3>

<p>In tomorrow’s blog post, I’ll continue this series by testing the log delay for <b>changing account permissions</b>. Stay tuned for more CloudTrail timing insights!</p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary2056651770150436444");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-810-testing-aws-log-latency.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='8320412940044285842'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-809-testing-aws-log-latency.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgExqUUrr2KY_1_qxNw-7LCwUG3LNjkRiW1ZxCWbQoP45eg-SbN3nVFkul-Y6htga975C0dqGISu1xnWrfnvhlzjo6NOhvYB4mEbl1xDTDZFDBAvXd8H7Etw-ccyRXy9-qaGEaua6oPKUANu4qHo-LzjPUDknEAaRqscfNkPIVwraB7P_El8I78DzJffzg/s320/timer.png","Daily Blog #809: Testing AWS Log latency - CreateAccessKey","https://www.hecfblog.com/2025/04/daily-blog-809-testing-aws-log-latency.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/log%20delay?&max-results=7'>log delay</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-809-testing-aws-log-latency.html'>
Daily Blog #809: Testing AWS Log latency - CreateAccessKey
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary8320412940044285842'>
<p> </p><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgExqUUrr2KY_1_qxNw-7LCwUG3LNjkRiW1ZxCWbQoP45eg-SbN3nVFkul-Y6htga975C0dqGISu1xnWrfnvhlzjo6NOhvYB4mEbl1xDTDZFDBAvXd8H7Etw-ccyRXy9-qaGEaua6oPKUANu4qHo-LzjPUDknEAaRqscfNkPIVwraB7P_El8I78DzJffzg/s1536/timer.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1536" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgExqUUrr2KY_1_qxNw-7LCwUG3LNjkRiW1ZxCWbQoP45eg-SbN3nVFkul-Y6htga975C0dqGISu1xnWrfnvhlzjo6NOhvYB4mEbl1xDTDZFDBAvXd8H7Etw-ccyRXy9-qaGEaua6oPKUANu4qHo-LzjPUDknEAaRqscfNkPIVwraB7P_El8I78DzJffzg/s320/timer.png" width="320" /></a></div><br /><p></p><p></p><p><b>Hello Reader,</b></p>

<p>Continuing from yesterday’s post, it's time for another <b>AWS CloudTrail speed test</b>. Today, we're testing the <code>CreateAccessKey</code> event, which occurs when a new Access Key ID is created for an IAM user.</p>

<h3>Second Test: AWS <code>CreateAccessKey</code> Event</h3>

<p>When I first ran this test, I wasn’t sure which region the log would appear in. Unlike the console sign-in URL, <b>IAM is a global service</b>. That means there’s no region-specific endpoint that clearly indicates where CloudTrail logs will land for IAM activity.</p>

<p>I had a theory that the event would appear in <code>us-east-1</code>—mainly because it's always listed first in AWS’s list of regions. Just to be sure, I switched between <code>us-east-1</code> and <code>us-east-2</code> during testing.</p>

<h3>Results</h3>

<p>Sure enough, after just <b>90 seconds</b>, the <code>CreateAccessKey</code> event appeared in <code>us-east-1</code>, confirming my suspicion. Just like with the <code>ConsoleLogin</code> event, the delivery was:</p>

<ul>
<li>Faster than the <b>15-minute SLA</b></li>
<li>Quicker than AWS’s <b>target goal of 5 minutes</b> for critical events</li>
</ul>

<h3>Coming Up</h3>

<p>In tomorrow’s blog post, I’ll be testing the log delay for <b>changing account permissions</b>. Stay tuned!</p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary8320412940044285842");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-809-testing-aws-log-latency.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
<div class='post hentry'>
<a name='20402361497936795'></a>
<div class='cutter overlay'>
<script type='text/javascript'>
//<![CDATA[

function emthemes_resize(e, d,oddurl) {
var c = 320;
var a = true;
var b = "https://2.bp.blogspot.com/-erTXCq61ULM/TmHYAQBZ0GI/AAAAAAAACCs/6cBX54Dn6Gs/s72-c/default.png";
if (a == true && e == "") {
e = b
}
image_tag = '<a href="'+oddurl+'" class="postthumb" style="background:url(' + e.replace("/s72-c/", "/s" + c + "-c/") + ') no-repeat center center;background-size: cover;width: 100%;height: 285px;display:block;" alt="' + d + '"/>';
if (e != "") {
return image_tag
} else {
return ""
}
};

//]]>
</script>
<a href='https://www.hecfblog.com/2025/04/daily-blog-808-testing-aws-log-latency.html'>
<script type='text/javascript'>
document.write(emthemes_resize("https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyfWgu0m4lXx7Lw5Btzj9Vx6svv7cMiRb5VvUPACWhf4t8F4_n7uam1FwZKJ-AyuHPtzsr3_m4aTdxewC96S3vn6f8r0Fif3C-8uLcR6Wn0gMY1czaW8J4n1VYXyJcO3tw_OgDVClkwd1p5vkfYj_t6LgjCpyGkLaq7LOTsvF5G70My13cFpoMtPQEU-M/s320/stopwatch.png","Daily Blog #808: Testing AWS Log latency - ConsoleLogin","https://www.hecfblog.com/2025/04/daily-blog-808-testing-aws-log-latency.html"));
</script>
</a>
</div>
<div class='metaside'>
<a href='https://www.hecfblog.com/search/label/testing?&max-results=7'>testing</a>
</div>
<h2 class='post-title entry-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-808-testing-aws-log-latency.html'>
Daily Blog #808: Testing AWS Log latency - ConsoleLogin
</a>
</h2>
<div class='post-header'>
<div class='post-header-line-1'></div>
</div>
<script type='text/javascript'>
var thumbnail_mode = "float" ;
summary_noimg = 160;summary_img = 160;img_thumb_width = 365;img_thumb_height = 280;
</script>
<script type='text/javascript'>
//<![CDATA[
function removeHtmlTag(e,f){
if(e.indexOf("<")!=-1){var g=e.split("<");
for(var h=0;
h<g.length;
h++){if(g[h].indexOf(">")!=-1){g[h]=g[h].substring(g[h].indexOf(">")+1,g[h].length)}}e=g.join("")}f=(f<e.length-1)?f:e.length-2;
while(e.charAt(f-1)!=" "&&e.indexOf(" ",f)!=-1){f++}e=e.substring(0,f-1);
return e+"..."}
function createSummaryAndThumb(k){
var i=document.getElementById(k);
var h="";
var g=i.getElementsByTagName("img");
var j=summary_noimg;
if(g.length>=1){h='';
j=summary_img}
var l=h+"<div>"+removeHtmlTag(i.innerHTML,j)+"</div>";
i.innerHTML=l};
//]]>
</script>
<div class='post-body entry-content'>
<div id='summary20402361497936795'>
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyfWgu0m4lXx7Lw5Btzj9Vx6svv7cMiRb5VvUPACWhf4t8F4_n7uam1FwZKJ-AyuHPtzsr3_m4aTdxewC96S3vn6f8r0Fif3C-8uLcR6Wn0gMY1czaW8J4n1VYXyJcO3tw_OgDVClkwd1p5vkfYj_t6LgjCpyGkLaq7LOTsvF5G70My13cFpoMtPQEU-M/s1536/stopwatch.png" imageanchor="1" style="font-family: Noto Sans JP; margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="1024" data-original-width="1536" height="213" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyfWgu0m4lXx7Lw5Btzj9Vx6svv7cMiRb5VvUPACWhf4t8F4_n7uam1FwZKJ-AyuHPtzsr3_m4aTdxewC96S3vn6f8r0Fif3C-8uLcR6Wn0gMY1czaW8J4n1VYXyJcO3tw_OgDVClkwd1p5vkfYj_t6LgjCpyGkLaq7LOTsvF5G70My13cFpoMtPQEU-M/s320/stopwatch.png" width="320" /></a></div><span style="font-family: Noto Sans JP;"><br /></span><p><span style="font-family: Noto Sans JP;"><br /></span></p><p><span style="font-family: Noto Sans JP;"><br /></span></p><p><b style="font-family: Noto Sans JP;">Hello Reader,</b></p>

<p><span style="font-family: Noto Sans JP;">In a recent Sunday Funday discussion, I asked about the <b>actual log delay</b> across the major cloud providers. By <i>log delay</i>, I mean the time it takes for an event to appear in a cloud provider’s audit log after it has occurred.</span></p>

<p><span style="font-family: Noto Sans JP;">Chris Eng did a solid job documenting this behavior for <b>Azure</b>, but didn’t cover <b>AWS</b> or <b>Google Cloud</b>. So, this post kicks off a new blog series where I’ll be digging into the log delays for those platforms—starting with <b>AWS</b>, and then moving on to <b>Google Cloud</b>.</span></p>

<h3><span style="font-family: Noto Sans JP;">First Test: AWS ConsoleLogin Event</span></h3>

<p><span style="font-family: Noto Sans JP;">For this initial test, I focused on the <code>ConsoleLogin</code> event in AWS. This is a <b>CloudTrail</b>-logged event that captures when a user successfully signs into the AWS web console.</span></p>

<p><span style="font-family: Noto Sans JP;">The first time I ran the test, I unknowingly logged in through the <code>us-east-2</code> region but was searching for logs in <code>us-east-1</code>. Since <b>CloudTrail logs are region-specific</b>, this led to confusion. Whether you’re using the Event History view or checking the S3 bucket where logs are stored, you need to ensure you're looking in the <b>correct region</b> if you want to see the expected log appear.</span></p>

<p><span style="font-family: Noto Sans JP;">I knew something was off when my stopwatch hit <b>17 minutes</b> without any sign of the login event—even though AWS provides a <b>15-minute SLA</b> for log delivery. Once I switched my search to <code>us-east-2</code>, I immediately found the <code>ConsoleLogin</code> event and realized I needed to redo the test.</span></p>

<h3><span style="font-family: Noto Sans JP;">Results</span></h3>

<p><span style="font-family: Noto Sans JP;">After logging out and back in (confirming again that my login URL showed <code>us-east-2</code>), I monitored CloudTrail for the event. The <code>ConsoleLogin</code> event showed up <b>within 90 seconds</b> of clicking the “Sign in” button.</span></p>

<p><span style="font-family: Noto Sans JP;">That’s not only faster than the <b>15-minute SLA</b>, but also quicker than AWS’s <b>targeted 5-minute delivery</b> time for critical events.</span></p>

<h3><span style="font-family: Noto Sans JP;">Coming Up</span></h3>

<p><span style="font-family: Noto Sans JP;">In tomorrow’s blog post, I’ll test the log delay for <b>API key creation</b>. Stay tuned!</span></p>
</div>
<script type='text/javascript'>
createSummaryAndThumb("summary20402361497936795");</script>
<div class='latestpostreadmore'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-808-testing-aws-log-latency.html'>Read More</a>
</div>
<div style='clear: both;'></div>
</div>
</div>
</div>
<div class='blog-pager' id='blog-pager'>
<span id='blog-pager-older-link'>
<a class='blog-pager-older-link' href='https://www.hecfblog.com/search?updated-max=2025-04-14T22:17:00-05:00&max-results=8' id='Blog1_blog-pager-older-link' title='Older Posts'>
Older Posts
</a>
</span>
<a class='home-link' href='https://www.hecfblog.com/'>
Home
</a>
</div>
<div class='clear'></div>
<div class='blog-feeds'>
<div class='feed-links'>
Subscribe to:
<a class='feed-link' href='https://www.hecfblog.com/feeds/posts/default' target='_blank' type='application/atom+xml'>
Posts
(
Atom
)
</a>
</div>
</div>
</div></div>
</div>
</div>
<div id='sidebar-wrapper'>
<div class='sidebar section' id='sidebar'><div class='widget PopularPosts' data-version='1' id='PopularPosts1'>
<div>
<h2 class='title'>
Top Posts/Right Now
</h2>
</div>
<div class='widget-content popular-posts'>
<ul>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5GWh0tXGteqxfrTQFDzW2kMooGHcwNkA6h9f_bfBDpsRMJtvg0UR1SHfIqx4UYxViUSiLEJFeWq9SryUdFz5gwlrOlXEFCZDoNnqRlbU3pn_lGfYxr60W3HgTAXc7b3IqLHYN3F0kW72JbkCoEID0IEVH-rls7Q1LRd_0awNugK97uT7EDxugHyuXvFM/s72-c/forgive.png' width='72'/>
</a>
</div>
<div class='item-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>
Daily Blog #815: I missed a day
</a>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS4Zw9KQkjNkc2JCwa0rDb1zPUCypCWZgocTE2voitZGOwzeZ2L_4D63LJ0j9JPosWO-nLahPLJYL-tsQMEgmfVhxmjpJ6Smn6FKVk2_JhClTq_WWhvcE13R76fsdeVWnJb-lPNFnJnif0HpOq-5yuADLWqHUQjQG4zpbLb46P0PM-dvHaM9rsb-D39qs/s72-c/sundayfunday.png' width='72'/>
</a>
</div>
<div class='item-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>
Daily Blog #814: Sunday Funday 4/20/25
</a>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi60iLy5WiSNWWSyeIoM9JsOK9Xwv5L7GT5g4NxBmdQwyQNbbHzgWoiG4FbwefVVrqg1yDaz0ripRAlyXSWNX4xJ3tACOcH7a0_YyoPVT2XMPnI2-0aE3gKc9hJWhMWYqDWlTUDM2XM3DEHiJB5Z1iSrtjQeP0qG5xKxmt4RewUfbqA0FR7cw1DXPwxYNM/s72-c/solutionsaturday.png' width='72'/>
</a>
</div>
<div class='item-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>
Daily Blog #813: Solution Saturday 4/19/25
</a>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK3OAgdGTujkTy5X-nM4364yuWc8TJa-ct4GGE-Phw3vdXX9DApDT_kRhIvjELWVYLvnTPIrJTGFuz2hhkhVoklmY6bixe4fypY1X1A8RuJgAoPUUK597HYTBKVrOgLMn11x2g6b0azfhNnVv7CE6p-ZZRcfmAnaIIB-RNEBL_rIakVyr80MUyDhMQGgI/s72-c/removefromgroup.png' width='72'/>
</a>
</div>
<div class='item-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>
Daily Blog #812: Testing AWS Log latency - Removing Users from Groups
</a>
</div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitgwVMjukTzCuo_bdlGs6epwr95Xl8x8_1MJt_djP4ZVpHlyf15v6pNOYVIhyphenhyphenEO0Tplcb2BMczNRo7gwcMaWeS0T64eGqUHQuini6o_dnTYA9dLg8oWfo4tJQD8i2ba_PZh3jQG6k_fgY_n86V6LkpQq2FQx4RO44Mvptg6TjE3V7-fs21BSiYgNXb2xk/s72-c/addusertogrou%5Bp.png' width='72'/>
</a>
</div>
<div class='item-title'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-811-testing-aws-log-latency.html'>
Daily Blog #811: Testing AWS Log latency - Modifying User Permissions
</a>
</div>
</div>
<div style='clear: both;'></div>
</li>
</ul>
<div class='clear'></div>
</div>
</div><div class='widget Attribution' data-version='1' id='Attribution1'>
<div class='widget-content' style='text-align: center;'>
Powered by <a href='https://www.blogger.com' target='_blank'>Blogger</a>.
</div>
<div class='clear'></div>
</div></div>
</div></div>

</div>

</div>

<script style='text/javascript'>
var postperpage=12;
var numshowpage=4;
var upPageWord=" < ";
var downPageWord=" > ";
var home_page="/";
var urlactivepage=location.href;
</script>

<div class='clear'></div>
</div><div class='clear'></div>
<footer id='f4'>
<div class='container'>
<div class='crosscol no-items section' id='adbox'></div>
<span class='odd-fwidgets'>
<div class='footer-widgets'>
<div class='box100 section' id='box100'><div class='widget HTML' data-version='1' id='HTML12'>
<h2 class='title'>About</h2>
<div class='widget-content'>
<img src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV1r9Fx_K3sKHfI8wnPUPPQFkxWhuxayNz8tT11sG8lYQgY1gGiwV9Qdlfeq-b80FMkRdsOwimMVCo2VbnE0aXyGxaTX1YYhUB5IZ4yK1LhASjfZxFmkAstIM9DnylPabPqQ15WEAFysbZ/s384/unnamed.png"/>
<br/>
A Blog on computer and digital forensic research, DFIR programming, the forensic lunch and more wirrten by Hacking Exposed Computer Forensic author David Cowen
</div>
<div class='clear'></div>
</div><div class='widget HTML' data-version='1' id='HTML11'>
<h2 class='title'>Follow us</h2>
<div class='widget-content'>
<ul class="social-iconz">

<li class="twitter"><a href="https://twitter.com/hecfblog?lang=en"><i class="fa fa-twitter"></i></a></li>
<li class="youtube"><a href="https://www.youtube.com/user/LearnForensics"><i class="fa fa-youtube"></i></a></li>
<li class="linkedin"><a href="https://www.linkedin.com/in/dcowen/"><i class="fa fa-linkedin"></i></a></li>
</ul>
</div>
<div class='clear'></div>
</div></div>
<div class='box100 section' id='box101'><div class='widget PopularPosts' data-version='1' id='PopularPosts2'>
<h2>Popular Posts</h2>
<div class='widget-content popular-posts'>
<ul>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html' target='_blank'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5GWh0tXGteqxfrTQFDzW2kMooGHcwNkA6h9f_bfBDpsRMJtvg0UR1SHfIqx4UYxViUSiLEJFeWq9SryUdFz5gwlrOlXEFCZDoNnqRlbU3pn_lGfYxr60W3HgTAXc7b3IqLHYN3F0kW72JbkCoEID0IEVH-rls7Q1LRd_0awNugK97uT7EDxugHyuXvFM/s72-c/forgive.png' width='72'/>
</a>
</div>
<div class='item-title'><a href='https://www.hecfblog.com/2025/04/daily-blog-815-i-missed-day.html'>Daily Blog #815: I missed a day</a></div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html' target='_blank'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiS4Zw9KQkjNkc2JCwa0rDb1zPUCypCWZgocTE2voitZGOwzeZ2L_4D63LJ0j9JPosWO-nLahPLJYL-tsQMEgmfVhxmjpJ6Smn6FKVk2_JhClTq_WWhvcE13R76fsdeVWnJb-lPNFnJnif0HpOq-5yuADLWqHUQjQG4zpbLb46P0PM-dvHaM9rsb-D39qs/s72-c/sundayfunday.png' width='72'/>
</a>
</div>
<div class='item-title'><a href='https://www.hecfblog.com/2025/04/daily-blog-814-sunday-funday-42025.html'>Daily Blog #814: Sunday Funday 4/20/25</a></div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html' target='_blank'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi60iLy5WiSNWWSyeIoM9JsOK9Xwv5L7GT5g4NxBmdQwyQNbbHzgWoiG4FbwefVVrqg1yDaz0ripRAlyXSWNX4xJ3tACOcH7a0_YyoPVT2XMPnI2-0aE3gKc9hJWhMWYqDWlTUDM2XM3DEHiJB5Z1iSrtjQeP0qG5xKxmt4RewUfbqA0FR7cw1DXPwxYNM/s72-c/solutionsaturday.png' width='72'/>
</a>
</div>
<div class='item-title'><a href='https://www.hecfblog.com/2025/04/daily-blog-813-solution-saturday-41925.html'>Daily Blog #813: Solution Saturday 4/19/25</a></div>
</div>
<div style='clear: both;'></div>
</li>
<li>
<div class='item-thumbnail-only'>
<div class='item-thumbnail'>
<a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html' target='_blank'>
<img alt='' border='0' height='72' src='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhK3OAgdGTujkTy5X-nM4364yuWc8TJa-ct4GGE-Phw3vdXX9DApDT_kRhIvjELWVYLvnTPIrJTGFuz2hhkhVoklmY6bixe4fypY1X1A8RuJgAoPUUK597HYTBKVrOgLMn11x2g6b0azfhNnVv7CE6p-ZZRcfmAnaIIB-RNEBL_rIakVyr80MUyDhMQGgI/s72-c/removefromgroup.png' width='72'/>
</a>
</div>
<div class='item-title'><a href='https://www.hecfblog.com/2025/04/daily-blog-812-testing-aws-log-latency.html'>Daily Blog #812: Testing AWS Log latency - Removing Users from Groups</a></div>
</div>
<div style='clear: both;'></div>
</li>
</ul>
<div class='clear'></div>
</div>
</div></div>
<div class='box100 section' id='box102'><div class='widget ContactForm' data-version='1' id='ContactForm1'>
<h2 class='title'>Contact Form</h2>
<div class='contact-form-widget'>
<div class='form'>
<form name='contact-form'>
<p></p>
Name
<br/>
<input class='contact-form-name' id='ContactForm1_contact-form-name' name='name' size='30' type='text' value=''/>
<p></p>
Email
<span style='font-weight: bolder;'>*</span>
<br/>
<input class='contact-form-email' id='ContactForm1_contact-form-email' name='email' size='30' type='text' value=''/>
<p></p>
Message
<span style='font-weight: bolder;'>*</span>
<br/>
<textarea class='contact-form-email-message' cols='25' id='ContactForm1_contact-form-email-message' name='email-message' rows='5'></textarea>
<p></p>
<input class='contact-form-button contact-form-button-submit' id='ContactForm1_contact-form-submit' type='button' value='Send'/>
<p></p>
<div style='text-align: center; max-width: 222px; width: 100%'>
<p class='contact-form-error-message' id='ContactForm1_contact-form-error-message'></p>
<p class='contact-form-success-message' id='ContactForm1_contact-form-success-message'></p>
</div>
</form>
</div>
</div>
<div class='clear'></div>
</div></div>
</div></span>
</div>
</footer>
<div id='credit'>
<div class='to_top' title='Scroll To Top'></div>

</div>

<div class='clear'></div>
<span class='odd-wrapper'>
<div class='lefts'>
<div class='footercredits section' id='footer-credits'><div class='widget HTML' data-version='1' id='HTML59'>
<p>Copyright © <script>document.write(new Date().getFullYear())</script> <a href='/'>HecfBlog</a><a href=''></a></p>
<div class='clear'></div>
</div></div>
</div></span>

<script type='text/javascript'>
//<![CDATA[
/*!
* SlickNav Responsive Mobile Menu v1.0.7
* (c) 2016 Josh Cope
* licensed under MIT
*/
!function(e,n,t){function a(n,t){this.element=n,this.settings=e.extend({},i,t),this.settings.duplicate||t.hasOwnProperty("removeIds")||(this.settings.removeIds=!1),this._defaults=i,this._name=s,this.init()}var i={label:"MENU",duplicate:!0,duration:200,easingOpen:"swing",easingClose:"swing",closedSymbol:"→",openedSymbol:"↓",prependTo:"body",appendTo:"",parentTag:"a",closeOnClick:!1,allowParentLinks:!1,nestedParentLinks:!0,showChildren:!1,removeIds:!0,removeClasses:!1,removeStyles:!1,brand:"",init:function(){},beforeOpen:function(){},beforeClose:function(){},afterOpen:function(){},afterClose:function(){}},s="slicknav",l="slicknav";a.prototype.init=function(){var t,a,i=this,s=e(this.element),o=this.settings;if(o.duplicate?i.mobileNav=s.clone():i.mobileNav=s,o.removeIds&&(i.mobileNav.removeAttr("id"),i.mobileNav.find("*").each(function(n,t){e(t).removeAttr("id")})),o.removeClasses&&(i.mobileNav.removeAttr("class"),i.mobileNav.find("*").each(function(n,t){e(t).removeAttr("class")})),o.removeStyles&&(i.mobileNav.removeAttr("style"),i.mobileNav.find("*").each(function(n,t){e(t).removeAttr("style")})),t=l+"_icon",""===o.label&&(t+=" "+l+"_no-text"),"a"==o.parentTag&&(o.parentTag='a href="#"'),i.mobileNav.attr("class",l+"_nav"),a=e('<div class="'+l+'_menu"></div>'),""!==o.brand){var r=e('<div class="'+l+'_brand">'+o.brand+"</div>");e(a).append(r)}i.btn=e(["<"+o.parentTag+' aria-haspopup="true" tabindex="0" class="'+l+"_btn "+l+'_collapsed">','<span class="'+l+'_menutxt">'+o.label+"</span>",'<span class="'+t+'">','<span class="'+l+'_icon-bar"></span>','<span class="'+l+'_icon-bar"></span>','<span class="'+l+'_icon-bar"></span>',"</span>","</"+o.parentTag+">"].join("")),e(a).append(i.btn),""!==o.appendTo?e(o.appendTo).append(a):e(o.prependTo).prepend(a),a.append(i.mobileNav);var d=i.mobileNav.find("li");e(d).each(function(){var n=e(this),t={};if(t.children=n.children("ul").attr("role","menu"),n.data("menu",t),t.children.length>0){var a=n.contents(),s=!1,r=[];e(a).each(function(){return e(this).is("ul")?!1:(r.push(this),void(e(this).is("a")&&(s=!0)))});var d=e("<"+o.parentTag+' role="menuitem" aria-haspopup="true" tabindex="-1" class="'+l+'_item"/>');if(o.allowParentLinks&&!o.nestedParentLinks&&s)e(r).wrapAll('<span class="'+l+"_parent-link "+l+'_row"/>').parent();else{var p=e(r).wrapAll(d).parent();p.addClass(l+"_row")}o.showChildren?n.addClass(l+"_open"):n.addClass(l+"_collapsed"),n.addClass(l+"_parent");var c=e('<span class="'+l+'_arrow">'+(o.showChildren?o.openedSymbol:o.closedSymbol)+"</span>");o.allowParentLinks&&!o.nestedParentLinks&&s&&(c=c.wrap(d).parent()),e(r).last().after(c)}else 0===n.children().length&&n.addClass(l+"_txtnode");n.children("a").attr("role","menuitem").click(function(n){o.closeOnClick&&!e(n.target).parent().closest("li").hasClass(l+"_parent")&&e(i.btn).click()}),o.closeOnClick&&o.allowParentLinks&&(n.children("a").children("a").click(function(n){e(i.btn).click()}),n.find("."+l+"_parent-link a:not(."+l+"_item)").click(function(n){e(i.btn).click()}))}),e(d).each(function(){var n=e(this).data("menu");o.showChildren||i._visibilityToggle(n.children,null,!1,null,!0)}),i._visibilityToggle(i.mobileNav,null,!1,"init",!0),i.mobileNav.attr("role","menu"),e(n).mousedown(function(){i._outlines(!1)}),e(n).keyup(function(){i._outlines(!0)}),e(i.btn).click(function(e){e.preventDefault(),i._menuToggle()}),i.mobileNav.on("click","."+l+"_item",function(n){n.preventDefault(),i._itemClick(e(this))}),e(i.btn).keydown(function(e){var n=e||event;13==n.keyCode&&(e.preventDefault(),i._menuToggle())}),i.mobileNav.on("keydown","."+l+"_item",function(n){var t=n||event;13==t.keyCode&&(n.preventDefault(),i._itemClick(e(n.target)))}),o.allowParentLinks&&o.nestedParentLinks&&e("."+l+"_item a").click(function(e){e.stopImmediatePropagation()})},a.prototype._menuToggle=function(e){var n=this,t=n.btn,a=n.mobileNav;t.hasClass(l+"_collapsed")?(t.removeClass(l+"_collapsed"),t.addClass(l+"_open")):(t.removeClass(l+"_open"),t.addClass(l+"_collapsed")),t.addClass(l+"_animating"),n._visibilityToggle(a,t.parent(),!0,t)},a.prototype._itemClick=function(e){var n=this,t=n.settings,a=e.data("menu");a||(a={},a.arrow=e.children("."+l+"_arrow"),a.ul=e.next("ul"),a.parent=e.parent(),a.parent.hasClass(l+"_parent-link")&&(a.parent=e.parent().parent(),a.ul=e.parent().next("ul")),e.data("menu",a)),a.parent.hasClass(l+"_collapsed")?(a.arrow.html(t.openedSymbol),a.parent.removeClass(l+"_collapsed"),a.parent.addClass(l+"_open"),a.parent.addClass(l+"_animating"),n._visibilityToggle(a.ul,a.parent,!0,e)):(a.arrow.html(t.closedSymbol),a.parent.addClass(l+"_collapsed"),a.parent.removeClass(l+"_open"),a.parent.addClass(l+"_animating"),n._visibilityToggle(a.ul,a.parent,!0,e))},a.prototype._visibilityToggle=function(n,t,a,i,s){var o=this,r=o.settings,d=o._getActionItems(n),p=0;a&&(p=r.duration),n.hasClass(l+"_hidden")?(n.removeClass(l+"_hidden"),s||r.beforeOpen(i),n.slideDown(p,r.easingOpen,function(){e(i).removeClass(l+"_animating"),e(t).removeClass(l+"_animating"),s||r.afterOpen(i)}),n.attr("aria-hidden","false"),d.attr("tabindex","0"),o._setVisAttr(n,!1)):(n.addClass(l+"_hidden"),s||r.beforeClose(i),n.slideUp(p,this.settings.easingClose,function(){n.attr("aria-hidden","true"),d.attr("tabindex","-1"),o._setVisAttr(n,!0),n.hide(),e(i).removeClass(l+"_animating"),e(t).removeClass(l+"_animating"),s?"init"==i&&r.init():r.afterClose(i)}))},a.prototype._setVisAttr=function(n,t){var a=this,i=n.children("li").children("ul").not("."+l+"_hidden");t?i.each(function(){var n=e(this);n.attr("aria-hidden","true");var i=a._getActionItems(n);i.attr("tabindex","-1"),a._setVisAttr(n,t)}):i.each(function(){var n=e(this);n.attr("aria-hidden","false");var i=a._getActionItems(n);i.attr("tabindex","0"),a._setVisAttr(n,t)})},a.prototype._getActionItems=function(e){var n=e.data("menu");if(!n){n={};var t=e.children("li"),a=t.find("a");n.links=a.add(t.find("."+l+"_item")),e.data("menu",n)}return n.links},a.prototype._outlines=function(n){n?e("."+l+"_item, ."+l+"_btn").css("outline",""):e("."+l+"_item, ."+l+"_btn").css("outline","none")},a.prototype.toggle=function(){var e=this;e._menuToggle()},a.prototype.open=function(){var e=this;e.btn.hasClass(l+"_collapsed")&&e._menuToggle()},a.prototype.close=function(){var e=this;e.btn.hasClass(l+"_open")&&e._menuToggle()},e.fn[s]=function(n){var t=arguments;if(void 0===n||"object"==typeof n)return this.each(function(){e.data(this,"plugin_"+s)||e.data(this,"plugin_"+s,new a(this,n))});if("string"==typeof n&&"_"!==n[0]&&"init"!==n){var i;return this.each(function(){var l=e.data(this,"plugin_"+s);l instanceof a&&"function"==typeof l[n]&&(i=l[n].apply(l,Array.prototype.slice.call(t,1)))}),void 0!==i?i:this}}}(jQuery,document,window);

!function(i){i.fn.theiaStickySidebar=function(t){function e(t,e){var a=o(t,e);a||(console.log("TSS: Body width smaller than options.minWidth. Init is delayed."),i(document).on("scroll."+t.namespace,function(t,e){return function(a){var n=o(t,e);n&&i(this).unbind(a)}}(t,e)),i(window).on("resize."+t.namespace,function(t,e){return function(a){var n=o(t,e);n&&i(this).unbind(a)}}(t,e)))}function o(t,e){return t.initialized===!0||!(i("body").width()<t.minWidth)&&(a(t,e),!0)}function a(t,e){t.initialized=!0;var o=i("#theia-sticky-sidebar-stylesheet-"+t.namespace);0===o.length&&i("head").append(i('<style id="theia-sticky-sidebar-stylesheet-'+t.namespace+'">.theiaStickySidebar:after {content: ""; display: table; clear: both;}</style>')),e.each(function(){function e(){a.fixedScrollTop=0,a.sidebar.css({"min-height":"1px"}),a.stickySidebar.css({position:"static",width:"",transform:"none"})}function o(t){var e=t.height();return t.children().each(function(){e=Math.max(e,i(this).height())}),e}var a={};if(a.sidebar=i(this),a.options=t||{},a.container=i(a.options.containerSelector),0==a.container.length&&(a.container=a.sidebar.parent()),a.sidebar.parents().css("-webkit-transform","none"),a.sidebar.css({position:a.options.defaultPosition,overflow:"visible","-webkit-box-sizing":"border-box","-moz-box-sizing":"border-box","box-sizing":"border-box"}),a.stickySidebar=a.sidebar.find(".theiaStickySidebar"),0==a.stickySidebar.length){var s=/(?:text|application)\/(?:x-)?(?:javascript|ecmascript)/i;a.sidebar.find("script").filter(function(i,t){return 0===t.type.length||t.type.match(s)}).remove(),a.stickySidebar=i("<div>").addClass("theiaStickySidebar").append(a.sidebar.children()),a.sidebar.append(a.stickySidebar)}a.marginBottom=parseInt(a.sidebar.css("margin-bottom")),a.paddingTop=parseInt(a.sidebar.css("padding-top")),a.paddingBottom=parseInt(a.sidebar.css("padding-bottom"));var r=a.stickySidebar.offset().top,d=a.stickySidebar.outerHeight();a.stickySidebar.css("padding-top",1),a.stickySidebar.css("padding-bottom",1),r-=a.stickySidebar.offset().top,d=a.stickySidebar.outerHeight()-d-r,0==r?(a.stickySidebar.css("padding-top",0),a.stickySidebarPaddingTop=0):a.stickySidebarPaddingTop=1,0==d?(a.stickySidebar.css("padding-bottom",0),a.stickySidebarPaddingBottom=0):a.stickySidebarPaddingBottom=1,a.previousScrollTop=null,a.fixedScrollTop=0,e(),a.onScroll=function(a){if(a.stickySidebar.is(":visible")){if(i("body").width()<a.options.minWidth)return void e();if(a.options.disableOnResponsiveLayouts){var s=a.sidebar.outerWidth("none"==a.sidebar.css("float"));if(s+50>a.container.width())return void e()}var r=i(document).scrollTop(),d="static";if(r>=a.sidebar.offset().top+(a.paddingTop-a.options.additionalMarginTop)){var c,p=a.paddingTop+t.additionalMarginTop,b=a.paddingBottom+a.marginBottom+t.additionalMarginBottom,l=a.sidebar.offset().top,f=a.sidebar.offset().top+o(a.container),h=0+t.additionalMarginTop,g=a.stickySidebar.outerHeight()+p+b<i(window).height();c=g?h+a.stickySidebar.outerHeight():i(window).height()-a.marginBottom-a.paddingBottom-t.additionalMarginBottom;var u=l-r+a.paddingTop,S=f-r-a.paddingBottom-a.marginBottom,y=a.stickySidebar.offset().top-r,m=a.previousScrollTop-r;"fixed"==a.stickySidebar.css("position")&&"modern"==a.options.sidebarBehavior&&(y+=m),"stick-to-top"==a.options.sidebarBehavior&&(y=t.additionalMarginTop),"stick-to-bottom"==a.options.sidebarBehavior&&(y=c-a.stickySidebar.outerHeight()),y=m>0?Math.min(y,h):Math.max(y,c-a.stickySidebar.outerHeight()),y=Math.max(y,u),y=Math.min(y,S-a.stickySidebar.outerHeight());var k=a.container.height()==a.stickySidebar.outerHeight();d=(k||y!=h)&&(k||y!=c-a.stickySidebar.outerHeight())?r+y-a.sidebar.offset().top-a.paddingTop<=t.additionalMarginTop?"static":"absolute":"fixed"}if("fixed"==d){var v=i(document).scrollLeft();a.stickySidebar.css({position:"fixed",width:n(a.stickySidebar)+"px",transform:"translateY("+y+"px)",left:a.sidebar.offset().left+parseInt(a.sidebar.css("padding-left"))-v+"px",top:"0px"})}else if("absolute"==d){var x={};"absolute"!=a.stickySidebar.css("position")&&(x.position="absolute",x.transform="translateY("+(r+y-a.sidebar.offset().top-a.stickySidebarPaddingTop-a.stickySidebarPaddingBottom)+"px)",x.top="0px"),x.width=n(a.stickySidebar)+"px",x.left="",a.stickySidebar.css(x)}else"static"==d&&e();"static"!=d&&1==a.options.updateSidebarHeight&&a.sidebar.css({"min-height":a.stickySidebar.outerHeight()+a.stickySidebar.offset().top-a.sidebar.offset().top+a.paddingBottom}),a.previousScrollTop=r}},a.onScroll(a),i(document).on("scroll."+a.options.namespace,function(i){return function(){i.onScroll(i)}}(a)),i(window).on("resize."+a.options.namespace,function(i){return function(){i.stickySidebar.css({position:"static"}),i.onScroll(i)}}(a)),"undefined"!=typeof ResizeSensor&&new ResizeSensor(a.stickySidebar[0],function(i){return function(){i.onScroll(i)}}(a))})}function n(i){var t;try{t=i[0].getBoundingClientRect().width}catch(i){}return"undefined"==typeof t&&(t=i.width()),t}var s={containerSelector:"",additionalMarginTop:0,additionalMarginBottom:0,updateSidebarHeight:!0,minWidth:0,disableOnResponsiveLayouts:!0,sidebarBehavior:"modern",defaultPosition:"relative",namespace:"TSS"};return t=i.extend(s,t),t.additionalMarginTop=parseInt(t.additionalMarginTop)||0,t.additionalMarginBottom=parseInt(t.additionalMarginBottom)||0,e(t,this),this}}(jQuery);
//# sourceMappingURL=maps/theia-sticky-sidebar.min.js.map

//]]>
</script>
<script>//<![CDATA[

$(document).ready(function () {

$('#main-wrapper, #sidebar-wrapper').theiaStickySidebar({
// Settings
additionalMarginTop: 30,
});

});

//]]>
</script>
<script type='text/javascript'>
//<![CDATA[
jQuery(function(){
jQuery('#masthead').slicknav({
prependTo:'.lefttop',
duration: 500
});
jQuery('.topmenu1').slicknav({
prependTo:'.headline',
duration: 500
});

});

//]]>
</script>
<script type='text/javascript'>
//<![CDATA[

$(document).ready(function () {

/*
var subtitle =$('#box19 h2').text();
var arr = subtitle.split('/');
$("#box19 h2").html("<span class='subtitle'>"+arr[0] + "</span>" + arr[1]);
*/

$('h2.title').each(function () {
if( $(this).text().indexOf('/') > 0 ){
var arr = $(this).text().split('/');
$(this).html("<span class='subtitle'>"+arr[0] + "</span>" + arr[1]);
}

});

$('.PopularPosts img').each(function () {
$(this).attr('src', function (i, src) {
return src.replace('s72', 's400');
});
});

$('.articles7').slick({
dots: false,
autoplay:true,
infinite: true,
slidesToShow: 4,
arrows:true,
slidesToScroll: 1,
prevArrow: $('.container23 .slick-prev'),
nextArrow: $('.container23 .slick-next'),
speed: 300,
responsive: [
{
breakpoint: 1024,
settings: {
slidesToShow: 2,
slidesToScroll: 1
}
}
,
{
breakpoint: 600,
settings: {
slidesToShow: 1,
slidesToScroll: 1,
}
}
// settings: "unslick"
// instead of a settings object
]

});

var ico = $('<i class="fa fa-angle-down"></i>');
var ico2 = $('<i class="fa fa-angle-down"></i>');
var ico1 = $('<i class="fa fa-angle-right"></i>');

$('.topmenu1 > li:has(ul) > a').append(ico);
$('.topmenu1 li:has(ul) li:has(ul)>a').append(ico1);

$('.sb-icon-search').on('click',function(){
$('.hiddenn').toggleClass('open');
$('.sb-icon-search').toggleClass('iconopen');

});

if($('.open')){
$('#outer-wrapper').on('click',function(){
$('.hiddenn').removeClass('open');
});
}
});
//]]>
</script>
<style>
@media only screen and (max-width: 767px){
div#pages-top{width:100%;}
.socialtop{left:0;padding-bottom: 20px;}
.sb-icon-search{color:#fff;}
}

</style>
<div class='oddthemes-pagination section' id='Pagination-Option'><div class='widget HTML' data-version='1' id='HTML709'>

<script type='text/javascript'>
var numpagination = '10';
if(numpagination=='off'||numpagination=='OFF'||numpagination=='Off'){
}
else{

/*<![CDATA[*/
var perPage=numpagination;
var numPages=3;
var firstText ='First';
var lastText ='Last';
var prevText ='Previous';
var nextText ='Next';
var urlactivepage=location.href;
var home_page="/";

if(typeof firstText=="undefined")firstText="First";if(typeof lastText=="undefined")lastText="Last";var noPage;var currentPage;var currentPageNo;var postLabel;pagecurrentg();function looppagecurrentg(pageInfo){var html='';pageNumber=parseInt(numPages / 2);if(pageNumber==numPages-pageNumber){numPages=pageNumber*2+1}
pageStart=currentPageNo-pageNumber;if(pageStart<1)pageStart=1;lastPageNo=parseInt(pageInfo / perPage)+1;if(lastPageNo-1==pageInfo / perPage)lastPageNo=lastPageNo-1;pageEnd=pageStart+numPages-1;if(pageEnd>lastPageNo)pageEnd=lastPageNo;html+="<span class='showpageOf'>Page "+currentPageNo+' of '+lastPageNo+"</span>";var prevNumber=parseInt(currentPageNo)-1;if(currentPageNo>1){if(currentPage=="page"){html+='<span class="showpage firstpage"><a href="'+home_page+'">'+firstText+'</a></span>'}else{html+='<span class="displaypageNum firstpage"><a href="/search/label/'+postLabel+'?&max-results='+perPage+'">'+firstText+'</a></span>'}}
if(currentPageNo>2){if(currentPageNo==3){if(currentPage=="page"){html+='<span class="showpage"><a class="nextprevious" href="'+home_page+'">'+prevText+'</a></span>'}else{html+='<span class="displaypageNum"><a href="/search/label/'+postLabel+'?&max-results='+perPage+'" class="nextprevious" >'+prevText+'</a></span>'}}else{if(currentPage=="page"){html+='<span class="displaypageNum"><a class="nextprevious" href="#" onclick="redirectpage('+prevNumber+');return false">'+prevText+'</a></span>'}else{html+='<span class="displaypageNum"><a href="#" onclick="redirectlabel('+prevNumber+');return false" class="nextprevious" >'+prevText+'</a></span>'}}}
if(pageStart>1){if(currentPage=="page"){html+='<span class="displaypageNum"><a href="'+home_page+'">1</a></span>'}else{html+='<span class="displaypageNum"><a href="/search/label/'+postLabel+'?&max-results='+perPage+'">1</a></span>'}}
if(pageStart>2){html+=' ... '}
for(var jj=pageStart;jj<=pageEnd;jj++){if(currentPageNo==jj){html+='<span class="pagecurrent">'+jj+'</span>'}else if(jj==1){if(currentPage=="page"){html+='<span class="displaypageNum"><a href="'+home_page+'">1</a></span>'}else{html+='<span class="displaypageNum"><a href="/search/label/'+postLabel+'?&max-results='+perPage+'">1</a></span>'}}else{if(currentPage=="page"){html+='<span class="displaypageNum"><a href="#" onclick="redirectpage('+jj+');return false">'+jj+'</a></span>'}else{html+='<span class="displaypageNum"><a href="#" onclick="redirectlabel('+jj+');return false">'+jj+'</a></span>'}}}
if(pageEnd<lastPageNo-1){html+='...'}
if(pageEnd<lastPageNo){if(currentPage=="page"){html+='<span class="displaypageNum"><a href="#" onclick="redirectpage('+lastPageNo+');return false">'+lastPageNo+'</a></span>'}else{html+='<span class="displaypageNum"><a href="#" onclick="redirectlabel('+lastPageNo+');return false">'+lastPageNo+'</a></span>'}}
var nextnumber=parseInt(currentPageNo)+1;if(currentPageNo<(lastPageNo-1)){if(currentPage=="page"){html+='<span class="displaypageNum"><a class="nextprevious" href="#" onclick="redirectpage('+nextnumber+');return false">'+nextText+'</a></span>'}else{html+='<span class="displaypageNum"><a class="nextprevious" href="#" onclick="redirectlabel('+nextnumber+');return false">'+nextText+'</a></span>'}}
if(currentPageNo<lastPageNo){if(currentPage=="page"){html+='<span class="displaypageNum lastpage"><a href="#" onclick="redirectpage('+lastPageNo+');return false">'+lastText+'</a></span>'}else{html+='<span class="displaypageNum lastpage"><a href="#" onclick="redirectlabel('+lastPageNo+');return false">'+lastText+'</a></span>'}}
var pageArea=document.getElementsByName("pageArea");var blogPager=document.getElementById("blog-pager");for(var p=0;p<pageArea.length;p++){pageArea[p].innerHTML=html}
if(pageArea&&pageArea.length>0){html=''}
if(blogPager){blogPager.innerHTML=html}}
function totalcountdata(root){var feed=root.feed;var totaldata=parseInt(feed.openSearch$totalResults.$t,10);looppagecurrentg(totaldata)}
function pagecurrentg(){var thisUrl=urlactivepage;if(thisUrl.indexOf("/search/label/")!=-1){if(thisUrl.indexOf("?updated-max")!=-1){postLabel=thisUrl.substring(thisUrl.indexOf("/search/label/")+14,thisUrl.indexOf("?updated-max"))}else{postLabel=thisUrl.substring(thisUrl.indexOf("/search/label/")+14,thisUrl.indexOf("?&max"))}}
if(thisUrl.indexOf("?q=")==-1&&thisUrl.indexOf(".html")==-1){if(thisUrl.indexOf("/search/label/")==-1){currentPage="page";if(urlactivepage.indexOf("#PageNo=")!=-1){currentPageNo=urlactivepage.substring(urlactivepage.indexOf("#PageNo=")+8,urlactivepage.length)}else{currentPageNo=1}
document.write("<script src=\""+home_page+"feeds/posts/summary?max-results=1&alt=json-in-script&callback=totalcountdata\"><\/script>")}else{currentPage="label";if(thisUrl.indexOf("&max-results=")==-1){perPage=20}
if(urlactivepage.indexOf("#PageNo=")!=-1){currentPageNo=urlactivepage.substring(urlactivepage.indexOf("#PageNo=")+8,urlactivepage.length)}else{currentPageNo=1}
document.write('<script src="'+home_page+'feeds/posts/summary/-/'+postLabel+'?alt=json-in-script&callback=totalcountdata&max-results=1" ><\/script>')}}}
function redirectpage(numberpage){jsonstart=(numberpage-1)*perPage;noPage=numberpage;var nameBody=document.getElementsByTagName('head')[0];var newInclude=document.createElement('script');newInclude.type='text/javascript';newInclude.setAttribute("src",home_page+"feeds/posts/summary?start-index="+jsonstart+"&max-results=1&alt=json-in-script&callback=finddatepost");nameBody.appendChild(newInclude)}
function redirectlabel(numberpage){jsonstart=(numberpage-1)*perPage;noPage=numberpage;var nameBody=document.getElementsByTagName('head')[0];var newInclude=document.createElement('script');newInclude.type='text/javascript';newInclude.setAttribute("src",home_page+"feeds/posts/summary/-/"+postLabel+"?start-index="+jsonstart+"&max-results=1&alt=json-in-script&callback=finddatepost");nameBody.appendChild(newInclude)}
function finddatepost(root){post=root.feed.entry[0];var timestamp1=post.published.$t.substring(0,19)+post.published.$t.substring(23,29);var timestamp=encodeURIComponent(timestamp1);if(currentPage=="page"){var pAddress="/search?updated-max="+timestamp+"&max-results="+perPage+"#PageNo="+noPage}else{var pAddress="/search/label/"+postLabel+"?updated-max="+timestamp+"&max-results="+perPage+"#PageNo="+noPage}
location.href=pAddress}

/*]]>*/

}

</script>

</div></div>
<style>
.preload{
display:none;
}
#slider1 .slickslider {
display: block;
}
#box19{display:block;}
</style>

<script defer='' src='/js/cookienotice.js'></script>
<script>
document.addEventListener('DOMContentLoaded', function(event) {
window.cookieChoices && cookieChoices.showCookieConsentBar && cookieChoices.showCookieConsentBar(
(window.cookieOptions && cookieOptions.msg) || 'Diese Website verwendet Cookies von Google, um Dienste anzubieten und Zugriffe zu analysieren. Deine IP-Adresse und dein User-Agent werden zusammen mit Messwerten zur Leistung und Sicherheit f\xfcr Google freigegeben. So k\xf6nnen Nutzungsstatistiken generiert, Missbrauchsf\xe4lle erkannt und behoben und die Qualit\xe4t des Dienstes gew\xe4hrleistet werden.',
(window.cookieOptions && cookieOptions.close) || 'Ok',
(window.cookieOptions && cookieOptions.learn) || 'Weitere Informationen',
(window.cookieOptions && cookieOptions.link) || 'https://www.blogger.com/go/blogspot-cookies');
});
</script>

<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/3071540258-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY4QpzBmJyAKZr3vWuDqa3UqTfoAJA:1752230552045';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d1466903740262764947','//www.hecfblog.com/','1466903740262764947');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '1466903740262764947', 'title': 'Hacking Exposed Computer Forensics Blog', 'url': 'https://www.hecfblog.com/', 'canonicalUrl': 'https://www.hecfblog.com/', 'homepageUrl': 'https://www.hecfblog.com/', 'searchUrl': 'https://www.hecfblog.com/search', 'canonicalHomepageUrl': 'https://www.hecfblog.com/', 'blogspotFaviconUrl': 'https://www.hecfblog.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'G-QEL17KD2DH', 'analytics4': true, 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Hacking Exposed Computer Forensics Blog - Atom\x22 href\x3d\x22https://www.hecfblog.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Hacking Exposed Computer Forensics Blog - RSS\x22 href\x3d\x22https://www.hecfblog.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Hacking Exposed Computer Forensics Blog - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/1466903740262764947/posts/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-2405736339290375', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/0a879ddeb6094a4d', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Share to X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'index', 'pageName': '', 'pageTitle': 'Hacking Exposed Computer Forensics Blog', 'metaDescription': 'A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': false, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Hacking Exposed Computer Forensics Blog', 'description': 'A hacking exposed blog about computer and digital forensics and techniques, exposed dfir incident response file systems journaling by David Cowen', 'url': 'https://www.hecfblog.com/', 'type': 'feed', 'isSingleItem': false, 'isMultipleItems': true, 'isError': false, 'isPage': false, 'isPost': false, 'isHomepage': true, 'isArchive': false, 'isLabelSearch': false}}]);
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML64', 'pages-top', document.getElementById('HTML64'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML4', 'main-menu-bar', document.getElementById('HTML4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML5', 'top-social-icons', document.getElementById('HTML5'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML25', 'slider1', document.getElementById('HTML25'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML49', 'boxslider', document.getElementById('HTML49'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML99', 'box19', document.getElementById('HTML99'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML9', 'box1', document.getElementById('HTML9'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML10', 'slot2', document.getElementById('HTML10'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML8', 'box', document.getElementById('HTML8'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML85', 'recent', document.getElementById('HTML85'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2241490851-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/123180807-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'sidebar', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AttributionView', new _WidgetInfo('Attribution1', 'sidebar', document.getElementById('Attribution1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML12', 'box100', document.getElementById('HTML12'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML11', 'box100', document.getElementById('HTML11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts2', 'box101', document.getElementById('PopularPosts2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'box102', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': 'Contact Form', 'blogId': '1466903740262764947', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY59lHe0xik8bEPXYW1aiwJlWfcMtw:1752230552056', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML59', 'footer-credits', document.getElementById('HTML59'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML709', 'Pagination-Option', document.getElementById('HTML709'), {}, 'displayModeFull'));
</script>
</body>
</html>

hecfblog.com Ads.txt file

Ads.Txt Alerts - A trading name of Red Volcano Limited Waterloo Buildings, Second Floor Rear, 53 London Road, Southampton, Hampshire, United Kingdom, SO15 2AD Contact ⋅ Sites ⋅ Terms of Use ⋅ Privacy Policy © Red Volcano 2020. All Rights Reserved.

Ads.Txt Alerts - A trading name of Red Volcano Limited

Waterloo Buildings, Second Floor Rear, 53 London Road, Southampton, Hampshire, United Kingdom, SO15 2AD

Contact

⋅

Sites

⋅

Terms of Use

⋅

Privacy Policy

© Red Volcano 2020. All Rights Reserved.