12 lines
288 B
Markdown
12 lines
288 B
Markdown
|
# windows forensics
|
||
|
|
|
||
|
|
## filesystem timeline
|
||
|
|
### plaso
|
||
|
|
|
||
|
|
## fileystem known data check
|
||
|
|
|
||
|
|
https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds
|
||
|
|
|
||
|
|
## fragments
|
||
|
|
#### chrome parser
|
||
|
|
https://github.com/obsidianforensics/hindsightkali
|