Let’s continue our digital forensics journey and start where we left off.  To contextualize the reader, the posts below are the previous articles on this series: Evidence Acquisition and Mounting Evidence Processing with Super Timeline NTFS Metadata and Timeline Super Timeline and Event Logs part I Super Timeline and Event Logs part II...