Round-up of Windows execution evidence sources by @harrisonamj. Captures evidence sources from Windows XP/Server 2003 through Windows 10/Server 2019. Blog: https://blog.1234n6.com/2018/10/available-artifacts-evidence-of.html Matrix: https://1234n6-my.sharepoint.com/:x:/r/personal/adam_1234n6_com/_layouts/15/Doc.aspx?sourcedoc=%7B7793c54d-e89c-4fd7-b124-31d5e035b1fc%7D&action=default

← @kwm Twitter archive

Keith

@kwm

Round-up of Windows execution evidence sources by @harrisonamj.

Captures evidence sources from Windows XP/Server 2003 through Windows 10/Server 2019.

Blog: https://blog.1234n6.com/2018/10/available-artifacts-evidence-of.html

Matrix: https://1234n6-my.sharepoint.com/:x:/r/personal/adam_1234n6_com/_layouts/15/Doc.aspx?sourcedoc=%7B7793c54d-e89c-4fd7-b124-31d5e035b1fc%7D&action=default

10/22/2018, 4:37:37 PM

Favs: 4

Retweets: 0

link