Volatility Profiles and Windows 10
As of the recording of this video, the current version of Volatility is 2.6; however, even if you have this version installe…
RDP Cache Forensics
As a continuation of the “Introduction to Windows Forensics” series, this video introduces Remote Desktop Protoc…
Recycle Bin Forensics
As a continuation of Richard Davis’ “Introduction to Windows Forensics” series, this video introduces Recy…
Shellbag Forensics
As a continuation of the “Introduction to Windows Forensics” series, this video by Richard Davis introduces Shel…
LNK Files and Jump Lists
Richard Davis continues his “Introduction to Windows Forensics” series. This video introduces the ubiquitous LNK…
CCleaner v5.33 Malware (Supply Chain Attack)
Richard Davis has posted a fresh video discussing the CCleaner malware incident reported by Ciscoâs Talos Intelligence Group…
Windows NTFS Index Attributes ($I30 Files)
This new video by Richard Davis from âIntroduction to Windows Forensicsâ series covers the basic information you need to kno…
Windows Memory Analysis
As a continuation of the âIntroduction to Memory Forensicsâ video, Richard Davis will show you how to use Volatility to anal…
Windows MACB Timestamps (NTFS Forensics)
As a continuation of the “Introduction to Windows Forensics” series by Richard Davis, this video introduces the …
Windows SRUM Forensics
Richard Davis continues his “Introduction to Windows Forensics” series with a video about the System Resource Ut…
