Saturday, September 27, 2008

eDiscovery and Lager Yeast


Well, that Wiezenbock turned out nicely. Even after it's noisy fermentation, it has a roasted and slight chocolate flavor. I find that it tastes better at a warmer serving temp. Very smooth. My son, Age and I brewed a Belgium Dubbel that has already fermented out. We bottled it last week, so now we are waiting. When tasting it out of the fermenter while we were bottling it was good. Strong and good. Age thought it almost tasted like a mixed drink because of the alcohol content.
Right now I'm going to brew a California Common beer. This uses a Lager yeast, but ferments at Ale temp. I'm using the White labs San Francisco Lager Yeast. I've made a yeast starter (in the pic), and its a good strong yeast. The starter won't quit. But I've got to get it boiled and into the fermenter before I leave to DC this week to attend an eDiscovery class. When I get back we'll give the Belgium Dubbel a taste test.

Saturday, August 16, 2008

NTFS and Homebrewing


Ok, I'm back. I just finished teaching an NTFS class. It's a week of examining MFT records and interpreting hexadecimal. The students really seemed to enjoy it. It can be mentally exhausting, so by the end of the week everyone is spent, including me. But I do enjoy teaching that class.


I just started home brewing a few months ago. My good friend Matt got me started, and now I can't stop. Its fun! Last weekend, Matt and I brewed 10 gallons of English IPA. I brewed the same recipe about 2 1/2 weeks ago and today I bottled it. I have my son Brandon and my nephew Adrian help cap the bottles. Last weekend my oldest son, Age, helped me brew 5 gallons of Weizenbock. It's in the fermenter for a couple of weeks, until it's ready to bottle. It uses a really active yeast that actually woke me up at 3:30am. I have it fermenting in my walk in closet. It's looking good!

Tuesday, May 6, 2008

Vista Thumbnail Cache

I've been trying to breakdown the database structure of the new centralized thumbnail database files. Mainly, the "thumbcache_nnnn.db" and "thumbcache_idx.db" files. If anyone has any resources or can help, let me know.
There are a few programs that can display the contents, but I want to know were the data is coming from, how it works.
The databases have an identifier of "CMMM" and "IMMM", respectively.
I've found some great info from Ben Vanik's website/blog.
Hopefully this mystery will be solved, someday. :)

Saturday, May 3, 2008

Microsoft LE Tech Event

Just got back from Seattle, Washington. I was invited to speak at the Microsoft LE Tech conference. I did a 90 min presentation on computer forensics, specifically on the topic of forensics with the new Vista operating system.
There were some great presentations from various law enforcement people. And I met a lot of interesting people, including Mark Russinovich.
It was raining about 1/2 the time I was up there, and around the 100 degree mark back home. So I guess I went at a good time.
I also got to see the Mariners and Oakland face off at SafeCo field. It was a fantasic game and I had a decent seat at right field.
It started raining during the game, near the seventh inning if I remember correctly. After it started raining the stadium roof was deployed. It was a sight to see the entire roof move into position. Pretty impressive engineering, I must say.
All in all a good trip. I also discovered a new beer, Alaskan Amber, good Alt bier!