Well hello and welcome to this video. Have you ever wondered exactly how to get an artist's business plan created? Not just what goes into it, but actually how to get it done in the fastest possible time. In my previous videos, which I'll link below this one, I've shared exactly the seven steps of what goes into a business plan and I will do a quick recap in a moment, but in this video I really want to break down step by step exactly how to get fully prepared so that you can put your plan together quickly and easily. Now having an artist's business plan really does make the difference between failure and success. And I'm sure you've heard that quote, if you fail to plan you are planning to fail. And just in case this all seems super overwhelming, I've got a brand new freebie for you. Yes, a PDF download, the ultimate artist's business plan checklist. I think you're going to love it. It's 20 boxes that you can take as you work your way down. What needs to go into the perfect business plan so that you can go on and really make a good living from your art. Well hello and welcome or welcome back to my channel. My name is Sophie and I help artists just like you to build a profitable business doing what you love. And if you want more tips and tricks on how to build that profitable business then you're in the right place because this channel shares all things art business related. So don't forget to subscribe and hit that bell to get notified every time I post a new video. So here's a quick reminder of my seven step business plan. There's a link up here to the video where you can watch it into more depth. But just as a reminder in case you're saying I have watched that video Sophie, we've got things like the big picture that's all your vision and mission and purpose where you're going. Then you've got your products and services. What are you going to be selling and at what price?  Filling that out by the way is going to enable you to be able to move swiftly into a new way of running the business. If something like a pandemic would have come along so you're always staying flexible in the head of the game. Then step five is business model then we've got step six which is all about marketing and sales and of course step seven is the finances. So like I say maybe when you've watched this video check out the full seven steps. And of course we need to remember that doing an artist business plan is 80% preparation and 20% putting it together. So that's the bits that go in it. Now we want to look at that 20% that vital 20% of how are you actually going to put it together. Because I've run workshops in the past where we spend all day kind of workshopping the plan and getting a lot of it done. And everyone confidently says I'm going to go home and finish that Sophie. And I just know unfortunately that the percentage of people who ever finish a business plan is really really small. And I'd love you to be part of increasing that percentage. Let's have more and more artists completing the plan. Because when you have a plan to work off you know what you're doing month by month week by week. And you're not losing hours of time scratching your head working out what you should be doing. And most importantly don't forget to get that checklist because that's going to help you. That's something you can print off and you can work longer. Yep I've done that. I've done that. I've done that. And of course by signing up to the checklist you will be put onto my email list from which you can unsubscribe anytime. But there's a sequence of emails that follow up that just give you a little bit more learning and points to specific videos that will help you as well in the different areas of the business plan. And I just need to let you know as well. Super excited. We do actually have a course that will walk you through all of those seven steps and kind of hold your hand to help you to complete that business plan. So look out for details. Either get on the waiting list or if the doors are open the information is below this video. Ok so now we've looked at the preparation, the checklist, the seven steps, what you need to do. Now let's get practical. Now let's talk about the really important part. That is, well ok that's great. I know what I need to put in the plan. I've got a template. Maybe I'm even doing the course. But now I need to actually get it done. So here's some top tips, suggestions and simple steps you can follow to get it done. So step one I'm going to recommend that you allocate two days to research and one day to getting the plan done. And you might be going oh my god Sophie that's a huge amount of time. But I can promise you that if you simply block out the time you will get the tasks done. There's nothing worse than saying ok I need to do this. I'll fill in what I can now and I'll research later. Just allocate the time because you're going to use it anyway. Allocate the time, really dive into it. Two days for research, one day for then infilling all the information that you've gathered. So step two of course is to do that research. So you need to be looking at things like the pricing. And don't forget we've got videos, the six steps for pricing that's up here and again links below this video. So if you're struggling with pricing and what you should be doing then you can research some element of research in that six steps. You want to do things like that. What about audience? You're going to need to do some research and discoveries to work out who that target audience. If you've done the research then that's a huge amount of it done, that's the 80% right. And again links below this video to my target audience videos that you can find out exactly who they are as well there. What about demands? You need to do some research to find out if there's actually demand for your product or service that you'd like to sell. Competitors, part of building a business plan of course is looking around and seeing what your competitors are doing, your direct competitors, your indirect competitors. So that's part of the research as well. So you're going to need a giant mug of tea to do this research. Or maybe even a coffee, or maybe something else. Then there's a lovely swath analysis, that's your strengths, weakness, opportunities and threats. There's an element of research and thinking there as well, perhaps specifically in terms of working out what your opportunities and threats might be. That might be a case of really scratching your head and really doing some research to find out exactly what those might be because a major part of your plan is going to be plugging those gaps. Because when you've worked out what your threats are and what your weaknesses are, for example, you'll be able to make sure that you don't stumble over those in the future. Then there's areas like your USP, your unique selling proposition. How do you do that? Well again we've got information on that, not here on the channel at the moment, but specifically in the course, build your artist business plan course, walks into exactly how to find out what makes you different. How can you stand out in a crowded marketplace? You can also do this again as part of your competitor analysis. So once you've done all the research areas, and those are just some of the ones I wanted to highlight, once you've got your checklist you'll have spotted a few others, you can go, ha, okay I can get that done. So you've allocated the time, you've got the research done, you've spent your two days, you've gathered lots of bits of paper and maybe some spreadsheets and information altogether, let's move on to step number three. Step number three, you're going to gather all your financials, so that might be getting out previous receipts, getting out previous tax returns, your spreadsheet, your cash flow forecast, your profit and loss, all the things that you need in order to be able to do your numbers properly in the business plan. Step number four, I love me some planners, so don't forget to print off your planners, things like an annual planner, maybe printed off quite large, quarters planner, that's a vital part of the business plan itself, and then things like monthly planners and maybe even weekly planners. You're doing a whole planning session, not just the business plan, but you want to translate that into easy things that you can put up in your working space so you always know exactly what you're doing at any one time. Step five, you want to be ready to make quick and clear decisions. I can't stress this enough. You can get lost down the rabbit hole of research, the rabbit hole of business planning and never actually get to the end. So you want to determine and make a deal with yourself that you're going to make quick decisions. So when it comes to, okay, I've done the pricing, that's it, I'm going to charge that. What are my key products? Okay, I'm just going to choose those and move on. Remember, the big thing here about business planning is it's not set in stone, right? You're writing it down as a working document that you can use ongoing. So you can always come back every quarter or halfway through the year and make some alterations because you'll have some data by then. You'll know what you're doing. You'll know what you love doing. You know what's going to sell well, what you'd like to do more of or less of. So just make the decisions, put the information in the plan and move on. So okay, step six on plan day, the day you have allocated. You want to make sure there are no distractions, all right? Switch off anything and everything. The only thing you want open are all the information and all the research and all those bits of paper that you've gathered for the plan.  The phone goes on silent, all the notifications. Just turn them off or turn your phone over. Then I recommend also working in blocks of one or two hours because it's only so long that your brain can stay focused, right? So you say, okay, I'm going to put a timer on for two hours. I've got my mug of coffee. I've got the information. I've got my plan. Bang, bang, bang. I'm going to start from the top. Then take a break. Go and stretch your legs, get some fresh air.  Come back in. Go again. Maybe two hours or one hour this time. And then break again. Then make sure you break for lunch, some exercise, jumping up and down, bit of a boogie, bit of a dance, some music. And then you move on to the next bit. And here's the most important thing is you need to get to the end. You really, really have got to say to yourself, I need to complete this, right? You're going to complete it in the quickest, fastest way. Make a decision, move on. Do the writing, move on. You'll be so proud of yourself when you have completed the plan. All right, the last step or tip or whatever you want to call it, number seven, just work down the sections as quickly as you can. So here how I like to do it. I like to start at the beginning and I like to infill the bits that I already know. Yes, key products of this. Yes, prices of that. Turnovers of that. Great. Yep, here's my audience. Ding, ding, ding, ding, ding. Anything I'm not sure of immediately. I'm going to leave and then I'm going to go back. And then I go back to the top, gather my research in. Go, oh, okay. Yes, that research is there. Now I'm going to add that bit, add that bit, add that bit. It's kind of like a process of a painting, all right? You're just going to start by that overall sketch a bit everywhere and maybe you're then going to put some layers in and then some more layers. And then only then are you going to work into the details. It's the same with your plan. Get all the basics in, infill the basics. You start to feel good. You've got something in all seven areas. Then go back in, do some layers. Bit more detail in there, bit more detail in there, bit more detail. And then just push yourself from that final hour to go and go into the detail. And then, of course, celebrate. It's massive. You've done it. You have written a complete business plan. And this is something that loads and loads and loads of your fellow artists will never do, all right? And you have set yourself above a lot of other people. You have set yourself up for success.  I'm so excited for you and I'm so excited for your business that you can create now. Now, like I said, if you need any help, we have some resources. Don't forget to watch the other videos that will pad out a little bit of what I've been talking about. All the links are below this video. And grab yourself my free checklist because why wouldn't you, all right? You've got something to work down as you go.  I don't want to watch the extra videos. I don't want to have to work at how to do it on my own. I just want you to walk me through all those seven steps and all the things I need to do. Then the Build Your Artist Business Plan is going to be the course for you. Check out the link below this video because I think we have a little special offer for you watching here today. I'm super excited to have the doors open to that course again. It's our foundational course. From there, everything can spring. So like I say, if you're somebody who just wants to get it done, get it done quickly, not have to look around, be just guided through each of those seven steps, end up with a completed plan, then this simple short course will be the one for you. And we look forward to having you join us on the course as well.  Leave me a helpful comment below as well, what bit of the video really inspired you, where you are with your business plan and if you need any help, don't forget to give us a shout out as well. Thank you so much for watching and we'll see you on the next one.


Mark Zuckerberg may be colorblind. In a recent interview he told a reporter, blue is the richest color for me. I can see all the blue. As you can see, to him, blue is the richest and most prominent color he can see. This is one of the main reasons why the founder of Facebook chose this blue color scheme for the social network. And now you know!


All right, so hello Bluetin Village and welcome to my talk. So I'll be discussing for today a title called Forensicating Endpoint Artifacts in the world of Cloud Storage Services. My name is Renz and Cruz, and then I'll be starting and sharing my screen. I hope you can see my screen. There you go. Okay, let's start. So again, my name is Renz and Cruz. I'm a DFIR guy. I'm doing digital forensics and incident response on my work in one of the companies in UK. But I'm based here in Dubai. I'm also an ex-security consultant slash IR. I'm part of the NCSA, or they call it the National Cybersecurity Agency in one of the countries in Middle East. I'm also a co-founder of Guy Dem. So we do specialize in training program for aspiring cybersecurity professionals. And we do offer like cyber defense, threat hunting, VAPT kind of thing. And also I've got accepted by various conferences such as besides London, Vancouver, Doha, Rutcon in Philippines. Recently we had the North Sec a couple of months ago in Montreal and now here in Bluetin Village, Defcon. So thank you so much for those BTV folks and for the council's who accepted my talk. And just a caveat there that this is not a talk primarily related to the big three or the big three cloud service providers such as AWS from Amazon, GCP or Google Cloud Platform and also Microsoft Azure. So if you're here just to learn more about these stuff. So this is not the talk for you. I'm particularly discussing the cloud storage services. And maybe some, maybe probably in the near future I'll be discussing this and we'll talk about Cloud Forensics and IR that and also the things that you have to do when there's an incident. But for now we're just going to discuss the cloud storage and also the footprints leaving behind on the endpoints. And these is what I'm saying will be analyzing the footprints related to the box, Dropbox, Google Drive, Mega and also OneDrive. So these are the primary cloud storage apps that we have today. There are a couple of versions or two versions that we have for this. So number one is the personal drive which typically used by the consumers. And there's also a second one which is the business version. So on the business versions that the main difference there is the added features such as file on demands. There's also a different retention policy that you can extend from 90 days up to whatever you want depends on the storage that you have and also more robust locking. But on this talk we're just going to focus and showcase more on the personal version itself. Now the question is in the world where the most important data is only present on probably third party systems. How do we effectively accomplish our analysis and investigations? Is there anything left on the endpoint that can be used for forensics? So that is the topic that I'm going to discuss mainly to have a forensic goodness and showcase this forensic goodness of these five predominate cloud storage apps that we have. And I also have a logo here in iCloud but basically it's quite popular especially for those Apple fanboys out there but it tends to be used by smaller organizations. And here's going to be the agenda for today. Why do we care? Okay, some use cases, some incidents that we do have from the past. What are the forensics value and the metadata the information that we can get by analyzing the metadata or the evidence. And also I'll be showing you a quick rundown of how we can perform an evidence acquisitions using couple of tools. All right, so now is this. So we have a problem and these cloud storage are being used by most of the adversary nowadays. So you may be familiar with MITRE so you may see on the right of my screen that there is a screenshot related to MITRE techniques that talks about exfiltration over web services, exfiltration to cloud storage. So that is exactly a technique ID 1567.002 which consists of sub techniques. So adversaries keeps on using these to exfiltrate data and also to store those stolen data from their victim. And we have here also a couple of adversaries that keeps on using it. Number one here is the Chimera. So Chimera abuses cloud services to exfiltrate data. They are actually using OneDrive accounts to exfiltrate those stolen data. Purilla, which is been here for a couple of years already. It's not new, but they also use OneDrive and FourShared. The latest one, which we do have a couple of months ago from Microsoft, which is the Haphneum. So Haphneum, as per the reports based from the threat intelligence, they also exfiltrate data on the file sharing sites like Mega or MegaSync. And last thing is Empire. So there is this kind of module, which is particularly for C2, that leverage Dropbox to perform data exfiltration. So now the question is, why do we care? Of course we do care. So cloud storage can be used to perform data exfilt, so we need to look for those remnants and also artifacts that can lead us to more granular informations and more data. It can also be used or heavily used by insider trends, especially if your company doesn't have proper policy or even like data loss prevention tools to detect those internal documents being shared, being uploaded, being downloaded by someone, by your employees, then you will be on a mass condition. Extremely useful, of course, especially when we are doing some analysis as it leaves tons of trails and also artifacts that can be used to track down the activities, what are the tasks that are being done by your employees or by the adversary by just looking into these footprints. So these are the things that we have collect or we can collect from the evidence standpoint. So we can collect local files or even the cloud files. The sync files on the local drive or even on the cloud file itself. So we have here something like databases and logs. So databases and logs can be beneficial to get most of the metadata that we need, especially the modified time, the timestamp, the different hashes. You will be surprised that there are a couple of hashes that are available depending on the cloud storage that we are using. So there are storage that are using SHA-1, there's storage that is using MD5 hashes and also the file names of the file itself. Other thing that is also useful for us is the deleted items. So of course, every forensic examiner labs to examine deleted items, especially in IR, we would like to know what are those files that they're trying to hide for us. And last thing is the operating systems artifacts. This could be bunch of Windows artifacts such as LNK files, prefetch files, registry entries and even event logs, jump layers and also memory dumps. So if ever you guys are using these kind of cloud storage apps, then once you execute this, once you use this, this will be existing almost everywhere, almost everywhere on the OS artifacts that we have known. Next is the endpoint footprints. So technically cloud storage applications live large footprints on the endpoint. So by checking the local systems, you can see a lot of artifacts that can be useful for our analysis. So one thing is account details. So what file success currently being shared with the user, what files may be available, not on the system, but available potentially in the cloud storage. What is also the files that are being downloaded, being transferred, what are the accounts that they've used to share these files. So in addition to that, we have also a bunch of timestamps that we can correlate with the user's activities. So other thing is like the hashes, that's what I've mentioned, depending on the cloud storage, it gives us the information of the hash that we can use to perform some comparison that they can use for being stored or being transferred from different recipients. Now let's start. So welcome to Dropbox. This is one of my favorite and not favorite when it comes to investigations, but one of the first storage that I've used. So a couple of years ago, but this is also the worst cloud storage, not in terms of the features of scalability and the UI, it's actually awesome, it's actually good. It suggests that it's hard when it comes to analysis and investigations because it is difficult cloud storage because of the primary databases are encrypted using Windows DP API, so you have to decrypt it. So you have to use some tools, you have to get the keys for you to decrypt it, but once you decrypted it, it will be easy to navigate because it is also using a normal type of database, which is on SQLite. So if you have like an SQLite viewer, then you can easily see this kind of format. They used to be pretty straightforward a couple of years ago, but they changed how they did things. So there is one metadata here, which is what we call the file cache that DBX. So this is the most important artifacts that you can have in Dropbox, as it contains most of the metadata that is locally synchronized files. Also the file cache and the config again, these are actually encrypted, but there is an open source tool that we can use to decrypt this using DPAPI toolkit made by Francisco Picasso. So he's a researcher and then he created this toolkit to decrypt this kind of stuff. So I have also mentioned here, one of a good talk a couple of years ago, since year 2012. So during 2012, there was a talk in Hack.loop, which is a conference in Luxembourg, by two great gents in the topic of a critical analysis of Dropbox software security. So they discovered that the encryption key used for the DBX files that are encrypted is kept in the registry and it's protected by again, the DPAPI. So I just mentioned here the link. So you can just visit this and look at the paper. It's kind of interesting. Next is OneDrive, which is the most popular due to the Windows having it as installed by default started on Windows 8 Plus version. So in most cases, you may see this on the default folder OneDrive, but sometimes it can also be as SkyDrive. So if you're examining, let's say a case and then you can see that there's a SkyDrive, that is actually a OneDrive. So SkyDrive was the old name of OneDrive, which is Microsoft acquired from years ago. And as what I've mentioned, there is a two variants of this. One is the personal and the second is the business variant of OneDrive. So the good thing about the business one is that gives you a log called Unified Audit Logs, or UAL. So UAL is enabled by default now for every user in the corporate, which gives you a 90 days detention by default. So once you extract certain logs in UAL, like for example, you are investigating a user on your company, and then if you extract the report to be via CSV or it could be the web UI that they have there, then you can get the audit logs, like the user's IP address, the account itself, and the file status, whether the user modified an account or modified a certain file on the SharePoint. If he deleted something, if he accessed something or even a copy, so that is existing on a UAL or Unified Audit Logs. But for this talk, I'll be just focusing on the personal variant of OneDrive. So we also have here a metadata called that the AT file or user seed that the AT file, which basically gives us the list of local files and cloud files names. So here, these are the three types of the states when OneDrive do some files on demand, so one of the cool things about this OneDrive is the concept of this, the files on demand. So only a subset of available files are likely resident in the local file systems. So as you may see here on my screenshots, that there are three types. So number one, the first one, the cloud icon, that states that the file or folder that is only existing on the cloud itself, okay? So it's not existing on your local drive. The second thing is the green check mark states that it is temporarily cached. So if a user go to this directory and then when they open it, then that actually gives them a temporary cache of the file itself. And then the last thing, which has the white check icon inside the green circle, that states that the file has been always kept on this device or it is stored locally. So if you right click a certain file, then that gives you an option of always kept on the device. So that means that this will be available on the local file as well as on the cloud file. But most of the time, when you see this cloud icon on the first one, this is being called as repost point. So these are actually just a placeholders. So the files is not existing on the hard disk, but you can get the metadata and it will be the reference file. To the existing file on the cloud. Okay, so sometimes once you image a certain hard disk, the user will be surprised that the file is not existing, but this is existing on the cloud because of that, because the reason why is this is just a repost point, unless the user click the available, put this as available or always kept this on the device or on the local file, then once you image your machine, then you will get the exact file and not just the metadata. Another metadata or artifacts that we can use for our investigations here are the .INI file because that gives us the one drive location information. Also, there's also a timestamp like the last time that one drive was synchronized with the cloud and also the bytes transfer that the request sent, which is the amount of activity during the sync file. There's also a text file here, as you can see on my screen, the profile, service, response, that text file. This is actually in the JSON format and it gives us the information of the first and the last name of the user plus their Microsoft account and the email address. And the last one thing here, which doesn't have the red box. So there is this file called that DAT file. So it shows the active file on the sync folders, including the local files and the files available on the cloud. So here, what I did here is to perform a B strings or a tool from Eric Zimmerman. So I think they call it better strings. So once you perform a B strings here on that DAT file, then that gives us a result of all the files that exist on our local drive, okay? So that identifies also whoever the user is and also the file names itself. And on the right side of my screenshot, you can see there the notepad that I've just opened, which basically gives you the name and also the last name of the user as well as his Microsoft account. So you may see there that my user email that I've used there is truzrenzon.jml.com. This is based on the JSON format. Next is Box, which is the most forensically and friendly app that we can deal with, okay? See, this is one of my favorite when it comes to performing an analysis because it's easy to navigate and also it's easy to investigate. They're also using an SQLite databases that provides the metadata like timestamps, the SHA-1, and for online and offline files, okay? So also the directories that you can find the local files are residing on the user profile and then Box. So this is by default, but this can be changed by the adversary too. So on the Box file, you can see here that there's a database called sync.db. So this is, this contains more of the identifying the items currently tracked by the Box Drive application. You can see here that there are tons of useful information when you go to Box item column or table from the sync.db database. You can see there that there is a parent item column. There's also a file name. There's also the checksum. You can see there that this is on a SHA-1. There's also some timestamp which you need to convert in an epoch time. Next thing is Google Drive. There are two types of Google Drive that we need to consider here. There is a Google Drive or Google Backup and Sync. So that is the new term now which they replace the original Google Drive applications on the year 2018. So this is the default desktop applications for consumer that uses Google Drive. So the other one is when let's say when your company is using an enterprise version of that, then they call it Google Workspace or they call it Google G Suite or G Suite FS or G Suite File Stream. So it is available on a G Suite customers, almost the same features or backup and sync with the addition of files on demand like the Box and the OneDrive, okay? So still the databases of this Google Drive or the Google Backup and Sync uses the form of SQL Lite version of database. And we do have here some metadata which are useful databases. So it's not encrypted. So you can see here the cloudgrop.db. So you will get tons of information such as a modified time, which is again in Unix, epoch time. We can also get here the MD5 hashes of the files. So we can run some comparison of the existing files whether there is a file that has been changed, modified by the adversary or maybe it's being deleted by someone, okay? So there is also a shared column here which is kind of interesting, okay? Shared column here means if it's one, then it is being shared. But if it's zero, if it's the data have zero value, then it means that this is not shared. Another column here that is kind of interesting to me is the dock type, okay? You can see there that the dock type consists of two values on my screenshots. There is a zero and one. So if the dock type has a value of zero, it means that that is a folder. But if the dock type has a value of one, that means that these are real files. Like if it's a PDF, it could be a text, it could be a document or PowerPoint, Excel, et cetera, okay? Next is, or the last thing that we will be discussing right now is mega sync, okay? So mega heavily used by adversary because they said that mega is one of the most secured applications or cloud storage services that are being used by the people, okay? So mega, so mega actually is having a word or it stands for mega-encrypted global access. So they are claiming that they are focused that, I mean, their service is focused heavily on security and they are using an end-to-end encryption and they are also the one who is claiming that they're using a zero knowledge encryption, okay? So zero knowledge encryption means that in this case, there's no one besides you has the keys to your data and not even the service you're storing your file speed. So they are claiming that we don't have any access to the keys that you have there.  So if you lose the keys or if you lose some sort of the passphrase that they gave to you once you register your account, then they don't have any way to recover it, okay? So that's why attackers love using mega because of this claim. And some of the local files that you can see from the window sides is existing on the user profile, app data, mega-limited, mega-sync slash lags. As you can see on my screenshot that you can see there the lag files. If you open it, you can see there what was the file that has been recently downloaded from my mega account. And also in mega on the web UI, you can see there that they also stored deleted files on the rubbish bin. So I'm not sure how they stored it. I think for 30 or 90 days as well, like the same cloud storage apps there. But once you delete a file, then that would be stored on the rubbish bin. It acts like the recycle bin or windows. There's also this local folder and a cloud folder where you can just drop anything there. So I have here a test folder existing on my local drive. So if ever I drop anything there, then that will automatically upload on my mega account as long as I have my internet. And like what we have on other cloud storage apps, you can also see most of this, once you execute this in most of the OS artifacts such as LNK and even in event lags as you can see on my screenshots, prefetch files. This that will automatically exist, of course, because that's an artifacts for executions. And also on the master file table, you can see that there's a lot of mega applications or traces that I'm the one or the user is using Megasync cloud storage apps. So that would be the last one. And now let's have a discussions on how can we perform an acquisition, okay? So on the cloud storage collections, most of these are leveraging the API functions. So you need to give them the credentials so that they can perform the activities such as evidence acquisitions. So there are a couple of stuff here. So I have here another GitHub repo that could be good to perform evidence acquisitions on a G Suite platform. So it's free. There's also a default take out from Google wherein you can dump most of the lags that you need from your investigation. And the predominant enterprise applications that you can find from the collection sites, which are the fResponse, Celebrite. So Celebrite has this cloud forensics analysis module too. And of course, magnet forensics. So magnet axiom, so useful. I've used this before. They are very good when it comes to providing and parsing a lot of fields, artifacts that you can find on any cloud storage that you are using. So these are the things that are commonly being seen that investigators are using. So just check it out. And this is the summary of the cloud storage files that we can get on each applications. So it would be better to have this as a reference guide. And right now, what if we need to get this from the endpoint? So let's say we need to get the artifacts, the footprints that we can get from the host level. So what could be the tool that we can use? So if you're not familiar with CAPE, so this is an absolutely amazing tool made and written by Eric Zimmerman. So there are two modules from CAPE. There is a target and then there's also a module which could be done by parsing all of the files and gives you a result on an Excel format or CSV format, which I will be performing a demo. So again, this is free.  So there are a couple of modules here which is entirely for cloud storage contents and metadata. So that is an absolutely amazing tool. All you have to do is just to click, like few clicks and then you have to wait for it to finish. Now it's demo time, I will be just be presenting it to you. Let me just share my screen again. Okay. So now this is the video that I'll be showing to you. So here this is my computer, this is my desktop. So what we'll be doing is to perform an evidence acquisitions based on the footprints, based on those artifacts, those locations, directories that we have just discussed by using a tool called CAPE by Eric Zimmerman. Okay, so I will be launching here CAPE on my desktop and then after a few seconds it will be appearing here. So I'll be using here a target which is basically where should I get those evidences? So I just have to put my C drive here. And the next thing is where should I put the output or where it will dump most of those artifacts that it will be collecting. And the next is getting the modules or putting the cloud storage there. So as you can see there that if I click that option then that gives me the artifacts from the Dropbox, from the OneDrive, from the Google Drive and also there's the sugar sink here. Okay, so after confirming that these will be the options that I need to do, I just have to convert and also put a container in VHDX so that I can easily just open it into whatever computers that I have. And then I'll be putting a cloud base name which is a cloud storage underscore artifacts. Okay, so once I'm done, then that's it. You just have to click the execute and then let's wait for this to finish. Okay, so this would take me less than a minute I think. And after that, then it will be dropped on the folder that we have just stated on the target destinations and then we can start our investigation. So this will ease us because sometimes we tend to forget where are the artifacts located, where are the default path, where are the database being located, then this could solve our problems. And it's very easy and it's very fast as well. As you can see here, it's already done and it took us only 40 seconds to finish. And now let's extract what are the files that we just got using K. Okay, so now, so I just dump everything on the Kpe output target. As you can see here, that those files are copied already on my directory. So you can see here the app data. If you go to that, you can see here the box, the Dropbox, the Google Drive, and also the Microsoft or the OneDrive. So if you go to the box, you can see here most of the logs that we've just discussed on the data. You can see there the databases where we can extract a couple of evidences and information. And yeah, and Dropbox, you can see here the sync history, the config, DBX files, and things like that. Okay, so that's how you perform evidence acquisitions by using KPE as a tool, which is a free tool. And it took us only a minute to get those artifacts that we need based on the cloud storage apps that we are using. And that's it for me, that's my demo. And let's go back to my slides. And actually, that's it, is there any question, right? So that's it for me, that is my talk. And if ever you have questions related to the topic, please do let me know. And these are a couple of the references related to this talk. And yeah, these are the links that we have here. Yeah, these are my handles, are my Twitter handle, Ranzek, and my LinkedIn, and also my email. So if you have any questions, please do let me know. Please reach out. And that's it. Thank you so much, Bluton Village, for having me here, of course. And I'll be opening the floor for any questions that we have from the audience.


So that first question, what are some of the factors that contributed to your decision to attend U.S.? I'm Avery Howland. I'm from Pittsburgh, Vermont. I'm studying environmental science, concentrated in conservation biology and biodiversity in the Rubinstein School.  I thought I knew the city. You know, I was like, oh, it's just going to be kind of old hat. Like, it's going to be boring. And that's not the reality that I have found as a student here.  You know, I never would have watched the sunrise over the mountains or the sunset over the lake. There is really a very wide range of students here from all over the United States and all over the world. And I've gotten to know a lot of different people from a lot of different places, which has been really cool. One of the fun things about being a Vermonter and living, you know, so close to school is that I can take my friends from other places home for a weekend. Or, you know, I've taken a couple of Swedish students home for Thanksgiving over the years, which has been really fun to be able to share my hometown and my culture with other students that I've met at the university. If I was talking to a Vermont student who is looking at coming to UVM, I would tell them, it's not what you think it is. I had this idea of what the University of Vermont and Burlington was like. And throughout my four years here, that's completely changed. It's so different than what I anticipated in the best way possible. I really, really enjoy my classes and interacting with my peers and my professors. Everybody is passionate about something different. And when you bring all those passions together in one classroom, it can really create a very interesting dynamic and a really cool environment to learn in. And it's really fun to just explore, you know, the different opinions and points of view as you're learning about the subject matter. I'm in a class right now called Restoration Ecology. And we're learning about how humans have, you know, basically ruined some ecosystems, but the steps that we can take to restore them. And I know sometimes in my line of study and environmental science, all of my professors are like, oh, it's a lot of doom and gloom. Like it's unhappy subjects to study sometimes because there has been so much damage done. But a lot of what I learned in class as well is, you know, how can we make up for the mistakes we've made or like repair the damage that we've done. So I'm really learning practical skills that I feel like I can take on, you know, to a job after, after I graduate. If I were talking to high school me, I think I would tell myself, you know, just calm down. Don't be as nervous as you are. Because I was very nervous coming into school. I was afraid, you know, I wouldn't fit in or I wouldn't find people that I like connected with or could be friends with. And that just was not the reality of my first year. I made friends everywhere I went because everyone else is in the same boat as you, you know, get involved in activities right away. I kind of held off on that. And I really regret not being involved my first semester. Because once I got involved, it really opened up the university to me. I met all these fantastic people from other majors and other schools that I never would have met if I hadn't started playing boom ball or going to pub quiz or, you know, joining clubs. And so it just is really important, I think, to go beyond the academics here and be involved in the community on campus. I am involved in Alpha Zeta, which is a co-ed service fraternity here on campus. We are an agricultural and environmental fraternity. So we do work across campus and in the Burlington community having to do with agriculture and the environment will help plant gardens in the spring. We grow pumpkins that we deliver to the president of the university every fall, which is really fun. My father was also a member of Alpha Zeta when he was a UVM student. So when I got inducted, he came to my induction ceremony and it was really special. He was very proud of me for being inducted. And it's really fun to kind of continue the legacy within my family.


What if you could drive top Cadillac cars but never own one? It's the Netflix model and it's coming to the auto sector. I'm joined now by Cadillac's chief marketing officer, Uwe Ellinghouse. It's great to see you here. So for $1,500 a month, I can get access to a host of top Cadillac cars and never own them. You can indeed. You never own them. You don't have to lease them. You don't have to finance them. And you have access to the beauty behind us, the CT6, our top of the range sedan, the iconic V-Series, CTS-V and ATS-V, and of course not to forget the Escalade as well. The Escalade. So if I'm going on a longer trip that requires an SUV or I'm just going to pick up some groceries in a sedan, it gives you a lot of flexibility. It does indeed. And it's entirely catering about your individual demands, whatever car you want and when you need it, we will deliver it. We will pick it up. We will ensure it. We will certainly make sure it's always clean and up to your expectations. It's white glove, pickup and delivery through and through. And folks, this is the most important part that for $1,500 that includes the car, insurance, maintenance, everything. The list goes on. And not six hours of waiting time to register it and all the other things that time-presured people like you and me simply do not need any longer. Is this how you view the future of the auto sector that millennials, younger people aren't going to want to buy cars anymore. They're just going to want to do this Netflix model? That's a very good question. Let me put it this way. No age group as homogeneous as it is often portrayed in the media. So even among millennials or my generation, generation X, we will have a variety of, let's say, excess models to cars. Some people still want to buy. Some people want to lease. Some people want to finance. But it's definitely true that particularly younger luxury customers in urban areas like New York say maybe it doesn't make sense that I either buy lease or finance a car when the car is sitting in a garage 94% of the time. And maybe 6% is the time that I really use it. And in this regard, yes, I do expect new ownership or excess models, as I should say, to become fine far more popular. Uwe Linghaus, Chief Marketing Officer at Cadillac, thank you so much. Thank you.


Hey, folks, what's up? It is Rob. I am joined here by Eric Bidleman. We are at the Tobacco Docs here in London. We're actually outside the venue, just sort of like scoping it out, getting a breather. It's been a long day so far. Eric, you just did a talk on building Chrome status and turning it into a PWA. For the folks at home who don't know anything about Chrome status, or maybe even PWA's, can you talk a little bit about some of the stuff that you covered? Yeah, so Chrome status is like the official dashboard of the Chrome team. And so as a developer, you can go in, you can learn about the new features that Chrome is implementing or is thinking about implementing, and kind of learn and feature adoption, see metrics, see samples, kind of just a one-stop shop for stuff. Stuff, yeah, cool. And now what were some of the things that you hit as you were sort of PWA-ing that site? What are some of the outcomes of that process? Yeah, I mean, so a lot of it was like figuring out how to make web components fast, doing things like lazy loading and working that into Chrome status. Service worker, obviously, was a huge focus for us in making that work offline, using some of the libraries that the DevRel team has produced. So yeah, just making it fast, taking advantage of server push and preload and all that new cool stuff, yeah. All the new hotness. All right, so if there's one thing you would have people at home do who maybe haven't seen your talk yet or anything like that, what is that one thing? Can I get two? Can I get two? You can have, for you, you get two. All right, first is to check out Polymer 2.0 because the team is working really hard on it. It's gonna be fast, it's gonna be lightweight. It's coming out very, very soon as a preview. So check that out, give us feedback. The other thing is check out Santa Tracker. Google Santa Tracker is gonna come up in the next couple of months here. Very fun, very interactive, share with the kids. Excited about that. It's built in Polymer, so there you go. There we go, there we go. All right, it's cool. So Polymer 2.0, Santa Tracker. Check them both out. This is the lead elf from Santa Tracker right here, y'all, this is the man who makes it happen. Eric, thank you so much for being with me. Thank you all for watching. If you have any questions, comments, concerns, feel free to contact us on the Twitter's at hashtag Polymer Summit. Again, I'm Rob, we're at the Polymer Summit Live 2016. Stay with us. See ya. See you guys.


My name is Shailen Hillbrands. I work at the St. Claude Hospital as an RN and I attended the nursing department at St. Claude State. I really enjoyed all the faculty in the nursing program.  I'm in the military and so that's super stressful trying to be a student and serve. But St. Claude State does an amazing job with their Veterans Resource Center. They also were super supportive in getting me what I needed finances wise and just getting enrolled in classes. Each opportunity that St. Claude State brought to me was definitely futuristic. I mean they really focus on their students and wanting them to succeed and giving you career options right as you graduate. I mean I nailed a job even before I had graduated and that's something that not a lot of people can say. St. Claude State is super important for the community. I know especially in nursing I mean they like from day one they really wanted us to be out and involved in the community. We helped with fundraisers and like volunteer organizations. I think it's important for the community to support St. Claude State because I mean these could be the future faces of people working within St. Claude and so making sure that students at St. Claude State feel welcome in the community or out and involved with them. That way when they do graduate then it's familiar. It feels like home. It's somewhere that you can start your family and send your kids to school and just continue to grow.


As some of my viewers may know, my full-time job is a firefighter, and I constantly look for ways in both my career and my personal life to make things simpler, and usually I do that by writing software. I have a project up on GitHub called Fireware, which is the collection of firefighter software that I've written, and one of my more current projects is the Shift Exchange Logger, which will run on all desktops and most mobile devices, actually more designed for mobile devices such as phones and tablets. And what this software allows you to do is simply log who you work for on a Shift Exchange and when they work for you, so you can keep track of who owes what days to who. It's simple to enter in who works for who on what day, and you can enter comments on why you're doing the Shift Exchange, whether it's a payback or you just want a list that you went on vacation, and then you can easily search through everyone who's done a Shift Exchange for you, or you've done a Shift Exchange for based on their name and come up with a quick list to figure out who owes who what days. So that's what this series is. Be sure to check out the annotation on the screen, it'll bring you to the full playlist and show you the software in action, and also a quick look at the code. I thank you for watching. As always, if you enjoy these videos, be sure to like, subscribe, and share, and also visit my website, Filmsitechrist.com. That's Chris the K. Should be linked in the description, and I hope that you have a great day. Okay, this is an introduction to Filmsbychrist.com. I'm Chris, that's Chris the K. That's me right there, my daughter Ember, and my wife Jennifer. We pretty much live in the swamps of Florida. I'm a firefighter by day, as well as by night. We work long hours, but that's not why you're here. You're here about the videos I put up on YouTube. These videos are mainly about computers and programming, which means most of my videos look something like this. And if that's what you're interested in, great. If not, that's all right. I do videos on other topics too, such as video editing, special effects, photo editing, 3D design, and music creation.  So I ask that you take the time to go to my Patreon page and look at different levels of rewards you can receive for different levels of backing. There should be a link in the description of this video if you are watching it on YouTube. Otherwise, you can visit Patreon.com forward slash metalx1000. And I thank you for your time and your support. Have a great day.


Interpol is ideally placed to tap into a range of stakeholders internationally who can support our work in this area in terms of securing major international sporting events. Interpol's global reach through its 190 Interpol countries and the National Central Bureau means that we can access any Interpol member country as a strategic partner and we certainly do that across the expert groups that we run and the other activities that we get involved in. We find that we have excellent support from the Interpol member countries to the work that we're doing, lots of interest and involvement. But we're also stepping outside of that work and certainly Interpol's credibility and its reputation allows us to approach organisations like the International Olympic Committee, the Council of Europe and a range of other international organisations who we have partnered with and will continue to partner with in the future to enhance the contributions that our member countries get from the work that Project Stadia does but also to link those non-law enforcement organisations to the law enforcement community which they find difficult to access at times in planning for and delivering these major international sporting events.


What's up guys? These are the Gove immersion TV backlight light strips. I reviewed a couple of Gove products recently, the glide lights and also the Gove flow plus lights. Check them out, I've got the links in the description for those. I'm going to be setting these light strips with the Samsung TV behind me. It's a 55 inch curved TV. Now what this essentially does is this comes with a little camera that sits on top of your TV that monitors the colors on the screen and it immerses those colors back onto the wall behind the TV to match them from the video to the light strip. I think that's going to be really cool. One of the reasons why you should definitely check this out is because if you wanted to achieve that same level of lighting effects, then you can get something like the Philips Hue gradient light strips that can do the same thing but you're also going to need a Hue sync box, the Hue bridges and all together you're going to spend hundreds and hundreds of pounds to do that. Essentially you can get this much cheaper. Check out the latest pricing information. It's roughly around 70 pounds. They do run some offers and discounts from time to time so definitely worth checking it out. Let's go ahead and open this up, show you guys how to set it up with a TV and let's see how it performs. So inside the box you've got an instruction card with the installation steps. Make sure you read that and follow this. You have your user manual with multiple languages. This is the light strip itself. I will open that in a second. In this one you have a set of calibration foams and I will show that when I set it up on what these are for. This is the control box and this will allow you to use the light strips without actually having to use the Govee app. So I'll give you a demo of this as well as the app. This is the 1080p smart intelligent camera that will basically pick up the colors on the TV. You can't use this as a webcam or anything else. It's purely for capturing the colors to project them back onto the light strip. You have the power adapter, two packs of mounts for the light strip, and some preparation pads to clean the back of your TV to put the light strips on. Now these are the RGB IC light strips. IC basically standing for independent control which allows the light strips to be multicolored so you can have the rainbow effects and really get those emotions in those lights. This is attached to a USB-C cable. The USB-C cable is the one that will go into the control box. So on the control box just to the right hand side you have a USB-A and a USB-C port. This will be connected into USB-C. The camera will go into USB-A and then the power adapter will come here onto the other side. So you'll have three cables basically connecting to the control box and you should really just place this in a convenient location where you can just press it to turn it on and off next to the TV. So now that I've showcased how to control this using this let's go ahead and set this up with the TV. So I'm just using one of the alcohol pads to wipe down the back of the TV. Make sure it's clean where I'm going to be placing the strips. So now I'm just going to start peeling off the 3M tape behind the light strips and I'm going to leave the USB pointed at the right location at the corner of the TV where the control box will go. Okay so the black one is the Go-V light strip. I've got it going around the top and the sides. There is a white light strip that you're seeing just below that. Those are my Philips Hue light strips but they're only single color so I can only just turn that on and enjoy a single backlight to the TV but the black ones here the Go-V ones running across the entire height and width of the TV. These are really going to immerse me into whatever I'm watching. So now that this is on the next step is to connect the camera to the top of the TV. Next I'll just take off the 3M sticker at the bottom of the camera and make sure I position this right on the center of the TV. There we go that's right in the center. Now I'm just going to connect the control box with the camera USB and the light strip USB-C and place this down onto the TV stand. So now that everything is connected I can just use this as a standalone light strip in the back the control box is on and all I have to do is hit the first button which is to power it on. You can see it's lit up red. I can change the colors by hitting the second button and this will cycle through all of the different colors like so but these are the single colors. The third button goes into music mode and that essentially picks up the audio that is picked up by the actual light strip and the control box and it will reflect the audio back with the lights onto the wall. So if I press this it's currently off but you'll notice it only lights up when it hears my voice. That is really cool so if you wanted the lights to change colors change effects change scenes in terms of what it's hearing in the background whether that's coming from the TV or from the environment in the room then you can also do that. To get the full capabilities of this and to start using the camera as well you need to set it up do some calibration and use the Govee Home app so let's take a look at that now. Before you go to calibrating the camera you need to connect this to the Govee Home app so you open up the app and I've got a couple of them already connected with my previous lights. On the top right hand corner you just hit the plus icon search for the code that's listed on the box and in this case it's H6199. There we go it's found it it will connect to it this is where you'll give it a name Govee TV it's now going on to the check-in camera stage there we go and now you're ready for calibration so you guys remember I showed you earlier the orange calibration phone pads which are these ones you just have to put them into the right points as instructed on the app as well and then go ahead and continue the installation from there now don't put these phones on with a lot of force because you are going to require to take them off and you don't want to damage the screen with the stickiness of the phone pads so just put it on very lightly and then you're ready to continue with the calibration so go ahead and hit the ready button on the app once you hit submit the calibration is successful there you go and now the app and the camera and everything is all connected to the TV so you can see there's a few things that you can do with the light strip from the app itself so you have a few modes down here you have music video color scene and DIY so they're pretty straightforward music is what I was showing you earlier if I tap on that it bounces to your voice and you can also select underneath that music sync from the device mic of your phone or from the light strip and you have few other options if you do either of these I've covered more extensive introductions into the application in my previous video so if you want to look at that do check out the link below and go through some of those in terms of video this is specific to this gov immersion light strip so you can see you can do part or all of the video if you wanted to get the color to automatically match according to what video is displayed on the screen and you also have two modes within that game and movie mode color mode if you wanted to do multiple different colors on the light strip itself there's lots of different segments here that you can select and also go in and change the color for scene it's probably one of the most popular ones this is where you can really get a good ambience mood effect to whatever situation you're in you know if you're at night time watching a movie whilst you're having your dinner maybe if you select this candlelight one it will give a give a nice warm glow like a fiery glow in the background or if you wanted to just get the full real capabilities of the light strip to show people then rainbow is a really cool effect as well so there's plenty of options there DIY if you wanted to maybe do something of your own then you can also set up your own custom light effects you can also change the brightness you can set it on timers if you're going to your effects lab you can find certain categories to see the right color that you want to display in the background and that could be related to you know certain foods animals flowers sports plants whatever it may be there's a whole bunch of different cool effects so that's everything I wanted to show the setup was very easy very straightforward I'm going to go ahead and take off these orange foam calibration pads and I'm going to give you guys a demo of how this performs in complete darkness so for this demo I'm just using a Philips Hue light waves demo video which will basically give you the best showcase of colors being reflected to match the videos in the background so sit back and enjoy so hopefully you guys enjoyed that demo I'm pretty impressed with how good this works with just a little camera on top the camera is obviously clear enough to pick out all of the colors to immerse them onto the walls behind the TV now one thing I would say is that this does require a camera to be put on top of a TV if that's something that you guys wouldn't like to have in terms of like just visually how it looks then this might not be the right product for you but for me it's not even that noticeable especially if you're really into a movie or a TV show you're going to be so engaged into the immersive light experience that you might not even end up noticing the camera there especially when it's quite dark in the room so for me I am a huge fan that this is a really great way to basically immerse yourself with any TV model I've reviewed a Philips Ambilight TV which has inbuilt lights on the background that match the TV's video screen and that works even better because it's made specifically for the purpose of matching what's on the screen to how the light is reflected to the wall behind it but this does an almost as good as a job not quite right there but it does a great job especially for this price range now the other thing I really like about this is once you do set it up with the app it's automatically connected to your Amazon Alexa app so I can just use voice commands to turn this on and off and there's multiple different commands that you can say as well so I've turned it off at the moment now if I go ahead I don't even need to control it with the app at the moment so I can go ahead and say Alexa turn on the gov TV light how quick and easy was that it's just straight up and running to the last setting that I had it on so that's it guys if there's any other questions drop them down below if you have any other feedbacks I'd like to hear from you check out the link in the description check out these light strips and all of the other lights that these guys do you can also get the gov flow pro lights which are essentially a couple of bars that you can mount to the back of your TV to the size of your desk monitors wherever it may be and that also has a camera that does the same thing I'll also leave a link in the description if you wanted to check that one out if you like these lights and you like this review make sure you give this video a huge thumbs up make sure to subscribe I've got really cool videos like this coming out in the near future and I will catch you guys at the next one take care


Okay, first of all I love you. I think you are amazing. I think what you're doing is incredibly important and when you're doing that just know there are millions of people out here cheering you on because we get it. We get it what they're trying to do and here's the thing I think most Americans get it. My question to you is this attack they're doing on law enforcement which is ironic since they're supposedly these big back-the-blue party she says that we get it we get what they're trying to do yet doesn't say what that is then she accuses these journalists and I guess Republicans of an attack on police like what does that even mean what attack what is she talking about this is pretty obviously a bunch of Democrats crafting propaganda to try and deflect the fact that they're the actual party that's anti-police they want to constantly remind you about police that were hurt on January the 6th and yes while that was horrible and evil and anybody that did it should face penalties the left and the Democrats are responsible for way more police injuries and deaths is all of this just making stuff up as they go along and pulling wackos in from the sidelines to try to put their hand in the air and depend and pretend like they're credible witnesses it's like she's not at all interested in getting to the truth she's only interested in if her side in her story is gonna take a negative hit over it and then she goes on to smear the witnesses this is all something that if it were happening the other way the left the Democrats in the media would be calling it a threat to democracy and we don't have to speculate about this because we have the receipts the president with his back up against the wall is saying journalists are dangerous sick enemies of the people bill crystal the now spoken Trump critic says the president sounds closer in spirit to Vladimir Putin than America more and more I think hate movement is the proper term for what's going on as the truth is under attack journalists are under attack it only goes so that one would follow the other oh that was different so what exactly is Stacy Plinkett doing that's so heroic and amazing hey first of all I love you I think you are amazing I think what you're doing is incredibly important and when you're doing that just know there are millions of people out here cheering you on in this case a Democrat politician turned state propagandist for the party Claire McCaskill is obviously referring to Stacy's labeling of multiple journalists who exposed the Twitter files as a quote direct threat mr. chairman I'm not exaggerating when when I say that you have called before you two witnesses who pose a direct threat to people who oppose them as the truth is under attack journalists are under attack oh that was different it's funny when people have to go through that no what's funny is that you apparently think these so-called threats somehow shield you from accountability meanwhile you can say whatever you want about your opponents and whatever threats they get are inconsequential to your freedom of speech to say it and thank you for calling me professional in that exchange course MAGA world is now saying that of course I'm unprofessional uneducated etc of course you are when you're a black woman going up against someone like Jim Jordan of course are you kidding me now in addition to these alleged threats that she's using to protect Twitter and the government from accountability she's also using her skin color no you show your uneducation by applying standards to journalists that you yourself don't feel the need to hold yourself to it's perfectly acceptable for you to lodge these attacks against everybody call them wackos call them MAGA world but if somebody else does that to you or tries to expose you or hold you to account for your power then you say that they're a direct threat this proves that you're the actual direct threat since you're the one in power or you're too stupid to realize that alright folks my little puppy puke can literally can't take any more of this so I'm gonna end it on that but if you enjoyed it please hit that like button share subscribe and make sure to leave a comment to vent some of those frustrations thanks a lot I'll see you all in the next one


And we will discuss right now the outlook for consumer staples. Love them or leave them for 2022. Melissa Armos with us, founder, owner of the Stockswush and Matt Malley, managing director, chief market strategist, Miller Tabak and company, also the founder of the Malley Report. I'm happy to see you both. We saw this group doing well late in the year last year. We always see it as a safe haven.  Tell me more. Why is that? The reasons that these stocks have had such a big rally this whole sector in 2020, 2021 and into the beginning of 2022 is because people are staying at home more, they're stocking up, they're buying things. And of course, I believe that inflation will continue throughout the entire year of 2022 and it also could possibly get worse. So people may be buying things ahead of an expectation also that the cost will continue to rise. So I wouldn't look for any of these stocks to be really falling off. I think so many of them are strong. I'm a little bit surprised that the way that Amazon has sold off actually the last month, but other than that, even Amazon isn't an uptrend, but other than that, Costco, Target, Walmart, many of these are making new highs, Kroger as well. Look for them to continue their strength. And I think they're probably good long-term buys for the next 12 to 24 months. It's interesting because Matt, I wanna get your view here too along with Melissa, sounds like you're also positive on the group. And what's interesting is that some of the big houses like Nuvine and Mizzouho, and I was looking at their year-end targets and they seem to be a little out of favor on consumer staples and more towards energy and financials and things like that. Matt, what is it that you like about the group? And you have some names you like as well. I agree with Melissa. First of all, the inflation thing of course is very bullish, but also look at this thing as a defensive play. People are very worried about the stock market. And throughout most of 2021, the consumer staples underperformed for most of the first half of the year, badly underperformed, but not only did the outperform in December, since early December, but they've outperformed in a major way. And part of that has to do with investors coming in saying, especially the institutional side saying, oh my gosh, I still wanna play in some of these high tech names. I mean Apple Computer, great company, Microsoft, great company. But I'm worried about the slowdown in the economy. I'm worried about inflation. I need to barbell my portfolio to have kind of some of those growth names, but I need some protection there. And also of course- Yeah, so what names did you have that you liked? Matt? And I like the names that pay a good dividend too because they kind of pay you to wait. But I like as Archer Daniels Midland. I mean, there's a company that's kind of a food company or is a food company. And that's good for inflation. People still need to eat. So they may not pay a lot of money for certain things, but they're certainly gonna pay for food and for detergent and things like that. I like Walmart because the stock really hasn't done much lately.  So there's Colgate's another name with a real nice deal there. So I like quite a few of them. Yeah, I understand what you're saying. And it seems to make sense what you're both saying at the same time. You had the analysts over down at Wells Fargo today pulling back on Target and Dollar General just saying that these names just couldn't get back to those pandemic highs and demand that we saw. And maybe they won't, but you're still liking these names. And Melissa, I know you had some of the names that you sent over as well that you liked. I just wanna hear more about your picks. Melissa, at the same time we showed the XLP, which is the group of the consumer staples, which has done well in one year. It's up about 16% and really provides a defensive side of the market, especially when people get nervous. Melissa, which names did you like? Well, I really like Costco and I do like Target and I do like Walmart as well, not just because they're lower priced stores, but because you can go there and you can buy anything.  People are still wanting to get out and do that. And that is a benefit I think when you have the brick and mortar stores, which obviously Walmart and Target do. I forgot one name to put in the list is I'm thinking about it here now with the meat products. I like Tyson Foods. That stock has been on a tear, a tear. And again, with earnings season two weeks away, you're gonna have some of these things report. Whether the earnings are good or whether the earnings are bad, I still think many of these things end up holding the uptrends. You've seen meat prices increase, you've seen food prices increase. And I don't think any of these things are gonna drop off, even if they would have, I hate to say pull back, but even if they would have some kind of sell-out like we saw within the market in the last two days, I still think that all these stocks are gonna hold the uptrend, but look for the earnings to come out. In three weeks, we start earning season. Costco's gonna report in the next six weeks and you're gonna have, again, Tyson Foods. Some of these things that I really like, Walmart, Target, they're towards the end of earnings season. But those will be the times that you'd wanna maybe add to your positions or take a new position. If you're not one of those things, wait until the earnings come out. And if the earnings reports is good and the forecast is good and the stock gaps up, you may wanna get in some of those things now. Again, when you see the market screeching like it was all of 2021 and making new highs, you have to say, gosh, it's time to invest in some of these things and you wanna invest how to make money in the market. You buy strong stocks and you short week stocks. That's how you do it. So because this whole sector- Right. Would not wanna be shorting it, be selling it. Yeah, yeah, yeah. Matt, your thoughts, final thoughts here for Matt as we take a look.  Supply chain is a big story, but you still see this group as the pay-to-weight and dividend payers as well. Matt? Yeah, and I totally agree with what Melissa's saying. And I just add this one thing we talked a lot about Walmart already, but the brick and mortar, et cetera, you can buy or get anything you want there. But also, they have been one of the best companies in the world to have compete with Amazon. I mean, to be honest with you, if we can get it at Walmart, walmart.com, we get it from Walmart because they're better at getting it to us quicker. So they've really moved into the online sales very, very well. So that's what I really think is gonna be a great play and it really hasn't done much in the last year. And I think that's gonna be one of those stocks that does do well. And a lot of times when you get a stock that doesn't do well for one year, the next year it does, especially when you get a company like Walmart and that has such a great management team. And Melissa mentioned Costco, I agree with that. Stock's a little bit more extended, but that doesn't mean that it might pull back. I think if it does pull back at all, I agree it'd be a great opportunity to buy the stock. I wanna say one more thing. Thank you both very, very much. Nice to see you. A happy new year to you both. Thank you always for being on with us here on the show. I appreciate it. I love seeing you, Melissa Arma of the Stock Swoosh, Matt Malley of Miller Tavak. The Malley Report as well. Thank you.


And if we could have the three speakers come up to the front again, that would be wonderful. Yeah, I was going to make a comment to yours. Yours, we've been doing some health care provider qualitative interviews as well. And in asking them, it's the same response. So I hadn't really thought about what I need to do in terms of family members. Yeah, it's just been a theme, definitely. Excuse me, Barbara Kanig, UCSF. That was a great panel and very, very helpful. I just have a couple questions maybe for all three of you to address. And one is the issue for group health. Now, Kaiser, you said that you would not think about people who weren't part of the plan. So I'm curious about that issue of how we get beyond the idea that, you know, this issue of health care systems and who's in and who's out, given that the family may be all over the country and in and out. So that's an issue. Maybe push you a little bit more about the issue of what to do when the initial person where you have the result is deceased. So that's the second issue. And then the third issue, do you think this plays out the same way for secondary findings and primary findings? First question about was group health. Oh, so that's actually step two of project because we're really interested. I can tell you in this study trying to coordinate testing for family members who were not inside of group health was just incredible. It took us 10 times the amount of time to try to coordinate their testing than if we had just drawn the blood, sent it to a lab for a single site mutation. So I think that that's something that has to be approached on a larger scale between payers because we are all going to be caring for each other's patient. And how can we do this most effectively and not spend days trying to coordinate studies? That's number one. Number two for patients who are deceased. I know in a merge when we enrolled patients, we had some patients who were over 100 years of age in our population. So hopefully they're still alive and kicking when we give them their results back. Yeah, but I think that what we've decided is that if they're not there, it goes to their necks of kin. And the third question was, I guess I feel that it's important to, I feel equally strong. I think if you have a genetic risk, it's important to communicate it whether it's secondary versus primary. Really? I don't think we have any survey data about the secondary versus primary issue. I would just say I agree that I think it is important irrespective. However, practically speaking, if you have a physician who's a specialist in a certain phenotype, they may just be better equipped to reach out and communicate to family members about that phenotype. And I think for incidental secondary findings, you know, they've just, there's an intermediate step whereby they need to figure out how it pertains to their patient first and foremost before they can involve family members. And so I just feel like practically speaking, it might be less likely to happen or it might be a second order priority to figure out what they should do just for practical reasons. In our return of results so far, we've really encouraged family members to attend if possible with the individual who's getting the return of results and that there's a couple of different reasons. Partly, it's for support. We all know when you get back. Particularly, it's well established in the cancer literature. If you have someone else with you, it helps in terms of hearing and understanding. But also, it's another vehicle for communicating with the other family members. And so we've had good success in having at least a supportive family member attend at the same time as our proband. And to say one thing about, you see people communicating to their children. It's really hard for something to get family members sometimes to communicate to siblings and to cousins. And it's really interesting how an individual, especially somebody who's past reproductive age, really just thinks about it for their children. So since this is Cesar and Emerge, I think there's going to, especially I assume in the next phase of Cesar, there's going to be even more interest in downstream testing. I'm actually not sure that we can log into each other's websites. And I don't know if our outcomes or measures committees talk, but it would be nice to share some of these surveys and interview guides of relatives. So we are at least all asking the same questions. That was just something for maybe the coordinating centers to think about. They do talk. And then I guess my question has to do the one that troubles me the most and I forgot which of you mentioned it, conflicts. So when I don't talk to that sister or I don't talk to that brother and whether, but that may be the person at 50% risk for that allele and whether you had any insights from your studies about conflicts amongst particularly siblings. Yeah, and they're definitely there. They're always dysfunctional families. And I think this is a real genetic counseling issue that we encounter quite often in general, you know, single gene testing or whatever. And I think oftentimes we become good family negotiators in trying to find some family member that that individual does communicate with who then might be the person who goes to the family member they don't communicate with. But it can get to be very elaborate in arranging ways to connect with family members. I don't know if... Yeah, I was just going to say I'm familiar with at least one program at MD Anderson where they are experimenting with obtaining prospective informed consent from the pro band to contact family members in the event that there is risk information that's quite, you know, impactful and likely to have a clinical effect. Now that's controversial obviously because that person has not been consented to be contacted. And I think there are ways of doing that without divulging all the information and then giving them the responsibility or the choice to reach out and follow up if they want to. Well, and that takes it off. If you're not talking to that sister, you're then not the one talking to that sister, right? They are. Yeah, and that's part of the issue where you have... I've had patients who say I do not want that person to know I don't care if she gets cancer. That would be a good outcome. So then you really need... It's people. Hi, I'm Georgia... Is this on? Georgia Wiesner from Vanderbilt. I actually have two comments and I just want to thank the group for all of your good insights and your work in this area. When my hair was much darker and I was starting off in genetics, one of the big things was geneticists think about families, other specialties don't. How can we empower our other specialties to really understand that diseases that run in families affect all of the families and it's really their job as well to do that. So I'm a little disheartened that people are still saying this is not on their radar and I'm wondering if there's some tools and develop for physicians to help them know that that really is part and their expanded role for patients because they do have families and they have to take care of the families. The second comment I actually have is really related to the dynamics of the family and how you go through that process of getting that information. We sometimes have the opposite problem of having people contact us saying there's a person in the family and they want to have testing and we have not gotten an okay to go into those records. So there's a lot of processes that have to go into place that allow you to share those records as well as encourage family members and I can't speak enough to how people think about family. They're only thinking about their offspring. They're not thinking about their sisters, their children or their cousins and they're not thinking about how to make mom and dad go through the process of testing so you can figure out what side of the family this mutation might be coming from. So there's really a lot of process steps that need to go into place that would be very nice to have some sort of roadmap. Agreed. I agree too. I think that we as both CSER and eMERGE have the opportunity to begin to define some of those options or opportunities or processes that build tools but also a best practice around communicating these results with family members. I think we have time for one more. Just one more question. Lucia, Handor, Fanny, Shirei. This was a terrific session. Thank you. This question is for the eMERGE investigators and it sort of relates to the previous question about non-genetics medical professionals. So for your survey efforts, is that heterogeneity of returning results to patients by either genetics professionals or non-genetics professionals an issue? Is it the same in eMERGE? Because I know in CSER some but not all results are returned by genetics professionals. Yeah, absolutely. It's a huge issue. And most of our sites are going to be returning results to primary care providers with the option of seeing genetics professionals. I guess maybe it's split about half and half. So we will definitely have primary care providers who will be the initial communicators of the results but then will have the option to refer. So that's why I started to study design. Do you sort of adjust for that or is there a way to sort of standardize how that works? We're constantly thinking about how to inform the primary care providers and that's part of why we're doing the survey and starting with qualitative interviews, building the survey and then sending that out to our eMERGE primary care providers. Okay. Thank you and I know we're at the end of this session but just for people who have sort of heard me on the phone but have not met me in person, I'm Malia Fullerton who is going to be convening this group of people who have legal interests in this issue. So I just wanted to kind of introduce myself and invite anyone who is maybe thinking about this problem in their healthcare system to come and speak to me over a break so we can, because I'm delinquent in convening that group. I know Janet and I want to get us together as soon as possible. So thanks very much.