Digital Forensics Artifact knowledge base
latest
File systems
Web browser
Windows
ActiveDesktop
Activities Cache Database
AMCache
Environment variables
EventLog
JumpLists
RecentFileCache
Registry files
Services and Drivers
System Resource Usage Monitor
Digital Forensics Artifact knowledge base
Windows
Edit on GitHub
Windows
Windows operating system artifacts.
ActiveDesktop
Activities Cache Database
AMCache
Environment variables
EventLog
JumpLists
RecentFileCache
Registry files
Services and Drivers
System Resource Usage Monitor
Read the Docs
v: latest
Versions
latest
Downloads
On Read the Docs
Project Home
Builds