Windows User Activity Analysis
What happened in those 36 hours? A forensics case to solve.
Task 1: Introduction
Task 2: Lab Connection Instructions
Task 3: Revisiting Registry
Task 4: Performing Registry Forensics
Task 5: ShellBags: Navigating the Past
Task 6: LNK Files - Shortcut
Task 7: JumpList: Leap Through Time
Task 8: Conclusion