🖥️
Windows DFIR
⌘
Ctrl
k
For the complete documentation index, see
llms.txt
. This page is also available as
Markdown
.
Copy
On this page
Windows Artifacts
Event IDs
Security
File System
1006
4688 - Process Created
4663
4656
6416
20001
20003
Previous
4768
Next
1006
Last updated
2 years ago