Identify the important Windows Event logs to hunt RDP lateral movement, both from the source and target system.

Learn what the SUM UAL database is and how it can help make or break DFIR analysis.

Learn how to take a triage image of a *nix based system using the UAC tool.

Learn the mystery of the Amcache artifact and how to use it in your DFIR cases

Learn what Shimcache is, how to analyze it, and why it's misunderstood.

Learn why visibility is everything when responding to an incident.

We've all heard of "Link" or "LNK" files, right? You want a faster way to open your favorite game, document or application without need...