The DFIR Spot

RDP Bitmap Cache - Piece(s) of the Puzzle

Windows Defender MP Logs - A Story of Artifacts

SUM UAL - Investigating Server Access with User Access Logging