Tag: Powershell

• September 17, 2019 Defcon DFIR CTF 2019 writeup - Triage VM
• August 3, 2019 USB storage forensics in Win10 #1 - Events