Georgios Karantzas .ical Sessions 06-29 12:20 25min It's Duck Season: Forensic Detection of BadUsb Attacks Georgios Karantzas During this study we explore deep parts of Windows systems and tryo to "excavate" useful logs so that we can behaviorally detect rubber duckies post-mortem. This study focuses on upper filter drivers, ETW, detection engineering and forensic logic. Smolarz