gedankensplitter/windows_forensics.md

windows forensics

filesystem timeline

plaso

fileystem known data check

https://www.nist.gov/itl/ssd/software-quality-group/national-software-reference-library-nsrl/nsrl-download/current-rds

fragments

chrome parser

https://github.com/obsidianforensics/hindsightkali