Investigate BITS jobs and identify the event logs and database associated with this!

Learn about the various artifacts created to help investigate lateral movement via RDP on both the source and target system

Identify the important Windows Event logs to hunt RDP lateral movement, both from the source and target system.

Investigate the puzzle pieces of RDP bitmap cache and how to stitch these together to get the (sorta) full picture.

What are the Windows Defender MP logs? What information do they contain and how can we use them in an investigation?

Learn some quick wins to minimize malicious script execution.