Windows Forensics
-
Investigating Windows Recycle Bin
-
Investigating Windows Program Executions
-
Timezone Conversions
-
Investigating Windows LNK and JumpLists
-
Investigating Windows Thumb Caches
-
Investigating Windows System Registry Artifacts
-
Investigating Windows User Registry Artifacts
-
Investigating Windows Shellbags
-
USB Forensics
-
Volume Shadow Copies (VSC) and File History
-
Investigating Scheduled Tasks
-
Windows Event Logs