Digital Forensics – SuperTimeline & Event Logs – Part I

«In these series of articles about performing file system forensics on a Windows system we covered the evidence acquisition in the first article. The second article was about processing the evidence and creating a timelin...»