Windows forensics - reuteras/dfirws GitHub Wiki Event logs Windows RDP-Related Event Logs: Identification, Tracking, and Investigation by Jonathon Poling on the blog Ponder the Bits. Resources Windows forensics by neolea 2025 Guide to Registry Forensics Tools