Module 00 · Sare
Windows Forensic Artifacts Deep Dive
Windows Forensic Artifacts Deep Dive
Waxaad si adag u fahmi doontaa Registry forensics, Prefetch/Shimcache, Event Logs, LNK files, browser forensics, iyo USB device forensics.
7 cashar 2 saac 0/7 dhammaystiran
Casharrada
1Windows Registry ForensicsWindows Registry ForensicsFaham qoto dheer structure-ka Registry-ga iyo keys-ka forensic value-ga leh.10 daq2Prefetch, Shimcache & AmcachePrefetch, Shimcache, and AmcacheFaham saddexda artifact ee muhiimka ah ee execution evidence bixiya — Prefetch, Shimcache, Amcache.12 daq3Windows Event Log Deep DiveWindows Event Log Deep DiveSii qoto dheeree fahamkaaga Event Log forensics — EVTX structure iyo Event IDs forensics-specific ah.13 daq4LNK Files & Jump ListsLNK Files and Jump ListsFaham sida LNK files (shortcuts) iyo Jump Lists u bixiyaan evidence ku saabsan file access.15 daq5Browser Forensics on WindowsBrowser Forensics on WindowsFaham sida browser artifacts (history, downloads, cookies) loo falanqeeyo forensics ahaan.11 daq6USB Device ForensicsUSB Device ForensicsFaham sida Windows loo diiwaan geliyo USB devices oo la xiray, iyo sida loo baaro data exfiltration.14 daq7Windows Artifacts — Full CapstoneWindows Artifacts CapstoneKu dar dhammaan waxa aad baratay module-kan — samee full Windows artifact investigation oo insider threat ah.15 daq