🔍
Windows Forensic Handbook
Copy
Artifacts by Type
📅
Event Log Artifacts
Microsoft Windows Shell Core
EventID 9707: Command Execution Started
Last updated
1 year ago
Ctrl
K