Okay, I have the platform/enterprise/machine datasources slides, DFIR tooling, Autopsy walkthru, and common Azure misconfigs slides (which are very boring and need an uplift). The incident recap and the report writing slides can wait til tomorrow. I am tired and fed up with working the weekend.

I think even when I was teaching I didn't prep this much content in one go 😅