A DFIR collective publishing browser-based forensic parsers and field notes on Windows AppCompat artifacts — RecentFileCache.bcf, Amcache, Prefetch, ShimCache — alongside practical incident-response workflows.
No posts yet.