🖥️
Windows DFIR
⌘
Ctrl
k
For the complete documentation index, see
llms.txt
. This page is also available as
Markdown
.
Copy
On this page
Windows Artifacts
Account Usage
Authentications SAM Artifacts
Authentications (Windows Event Log)
Group Membership
RDP
SSH
Rouge Local Accounts
CrowdStrike Searches
Previous
Server File/Folder Locations
Next
Authentications SAM Artifacts
Last updated
2 years ago