π
Windows Forensic Handbook
β
Ctrl
k
For the complete documentation index, see
llms.txt
. This page is also available as
Markdown
.
Copy
On this page
Artifacts by Type
π
Filesystem Artifacts
USN Journal
Prefetch
AutomaticDestinations Jumplists
Recycle Bin $I/$R Files
Task Scheduler Files
Windows Error Reporting Files (.WER)
System Resource Usage Monitor (SRUM)
Last updated
2 years ago