Incident Response

Windows Dead Box (Disk Image) Forensics

My notes on finding and analyzing useful DFIR artifacts in a Windows disk image.