Forensics · Windows Forensics 6
- Lesson 4.6: Volume Shadow Copy and Recovering Old Files
- Lesson 4.5: Windows Persistence and Where Malware Hides
- Lesson 4.4: File and Folder Access Artifacts
- Lesson 4.3: Program Execution and Proving a Program Ran
- Lesson 4.2: Event Log Forensics with evtx Files
- Lesson 4.1: Registry Forensics and the Windows Hives