Investigate BITS jobs and identify the event logs and database associated with this!

Learn about the various artifacts created to help investigate lateral movement via RDP on both the source and target system

Investigate the puzzle pieces of RDP bitmap cache and how to stitch these together to get the (sorta) full picture.

Learn what the SUM UAL database is and how it can help make or break DFIR analysis.

Learn how to take a triage image of a *nix based system using the UAC tool.

Learn the mystery of the Amcache artifact and how to use it in your DFIR cases

Learn what Shimcache is, how to analyze it, and why it's misunderstood.

Learn why visibility is everything when responding to an incident.

We've all heard of "Link" or "LNK" files, right? You want a faster way to open your favorite game, document or application without need...