windowsartifactscollection
The Complete Guide to Windows Artifact Collection: From Prefetch to USN Journal
A detailed look at the essential artifacts to collect in Windows digital forensics. Learn the location, structure, and forensic value of Prefetch, EventLog, Registry, $MFT, USN Journal, and more.
