> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-dfir-and-mittr.md).

# Windows DFIR & MITTR

- [Initial Access](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access.md)
- [Content Injection](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/content-injection.md)
- [Drive-by Compromise](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/drive-by-compromise.md)
- [Watering Hole Attack](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/drive-by-compromise/watering-hole-attack.md)
- [Microsoft Files (Payload Execution)](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/drive-by-compromise/microsoft-files-payload-execution.md)
- [Exploit Delivery](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/drive-by-compromise/exploit-delivery.md)
- [Viewing Browser History Files](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/drive-by-compromise/viewing-browser-history-files.md)
- [Phishing](https://windows.dfirhandbook.com/windows-dfir-and-mittr/initial-access/phishing.md)
- [Execution](https://windows.dfirhandbook.com/windows-dfir-and-mittr/execution.md)
- [Persistence](https://windows.dfirhandbook.com/windows-dfir-and-mittr/persistence.md)
- [Privilege Escalation](https://windows.dfirhandbook.com/windows-dfir-and-mittr/privilege-escalation.md)
- [Defense Evasion](https://windows.dfirhandbook.com/windows-dfir-and-mittr/defense-evasion.md)
- [Credential Access](https://windows.dfirhandbook.com/windows-dfir-and-mittr/credential-access.md)
- [Logon ID](https://windows.dfirhandbook.com/windows-dfir-and-mittr/credential-access/logon-id.md)
- [Discovery](https://windows.dfirhandbook.com/windows-dfir-and-mittr/discovery.md)
- [Lateral Movement](https://windows.dfirhandbook.com/windows-dfir-and-mittr/lateral-movement.md)
- [Collection](https://windows.dfirhandbook.com/windows-dfir-and-mittr/collection.md)
- [Command and Control](https://windows.dfirhandbook.com/windows-dfir-and-mittr/command-and-control.md)
- [Exfiltration](https://windows.dfirhandbook.com/windows-dfir-and-mittr/exfiltration.md)
- [Impact](https://windows.dfirhandbook.com/windows-dfir-and-mittr/impact.md)