Richard Davis has published another interesting video – an introduction to basic Windows forensics. He covers such topics, as UserAssist, Shellbags, USB devices, network adapter information and Network Location Awareness (NLA), LNK files, prefetch, and numerous other common Windows forensic artifacts. You will walk through a DFIR cheat sheet Richard has created, and see a live example of each topic as he analyzes a Windows 10 image.

Load More Related Articles
Load More In Videos

Leave a Reply

Your email address will not be published. Required fields are marked *