Page Index - nurit-cyber/OperatingSystemForensics GitHub Wiki

39 page(s) in this GitHub Wiki:

• Home
• Windows Table of Contents
• Intro to Windows Operating System Forensics
• Windows Domain
• User Accounts
• Forensic Analysis of Cut, Copy, Paste Operations
• Copying a file
• Moving a file
• Modifying/Saving an existing file
• Accessing a file
• Command Line
• Tips and Tricks
• Tools
• Jump Lists
• Please reload this page
• LNK Files
• Please reload this page
• Prefetch & Superfetch
• Please reload this page
• Program Execution Traces in Registry
• Please reload this page
• Recycle Bin
• Please reload this page
• Registry Hives
• Please reload this page
• Scheduled Tasks and Event Logs
• Please reload this page
• Shell Bags [In Progress]
• Please reload this page
• Thumbnail Caches
• Please reload this page
• USB Artifacts
• Please reload this page
• Volume Shadow Copy
• Please reload this page
• Windows Registry Basics
• Please reload this page
• Windows Search Artifacts [in progress]
• Please reload this page