🔍
Windows Forensic Handbook
CtrlK
  • 👋Welcome
  • Artifacts by Type
    • 🗄️Registry Artifacts
    • 📂Filesystem Artifacts
      • USN Journal
      • Prefetch
      • AutomaticDestinations Jumplists
      • Recycle Bin $I/$R Files
      • Task Scheduler Files
      • Windows Error Reporting Files (.WER)
      • System Resource Usage Monitor (SRUM)
    • 📅Event Log Artifacts
  • Artifacts by Activity
    • 🏃‍♂️Execution
    • 🗒️File Activity
    • 👨‍🔧Account Activity
    • 🌎Network Activity
    • 🔍Browser Activity
    • 🖥️System Enumeration
Powered by GitBook
On this page
  1. Artifacts by Type

📂Filesystem Artifacts

USN JournalPrefetchAutomaticDestinations JumplistsRecycle Bin $I/$R FilesTask Scheduler FilesWindows Error Reporting Files (.WER)System Resource Usage Monitor (SRUM)

Last updated 1 year ago