New Course from 13Cubed!
Check out the first official 13Cubed Training Course, Investigating Windows Endpoints! https://training.13cubed.com

An introduction to basic Windows forensics, covering topics including UserAssist, ShellBags, USB devices, network adapter information and Network Location Awareness (NLA), LNK files, prefetch, and numerous other common Windows forensic artifacts. We will walk through a DFIR cheat sheet I have created, and see a live example of each topic as we analyze a Windows 10 image.

The *cheat sheet is available for download here:
https://drive.google.com/file/d/1pU6C...

*This cheat sheet is not affiliated with the SANS Institute. I created it as a study guide for FOR408 (FOR500), and am providing it to the community in hopes that it may help others.

#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics