links for 2009-10-21 October 21, 2009 by Andrew Hay | 10890 commentshttp%3A%2F%2Fwww.andrewhay.ca%2Farchives%2F1089links+for+2009-10-212009-10-21+20%3A04%3A30Andrew+Hayhttp%3A%2F%2Fwww.andrewhay.ca%2Farchives%2F1089 Windows Incident Response: Timeline Creation Tools (tags: timeline forensics) Computer Forensics – News – The Importance of Memory Search and Analysis (tags: forensics memory)