This lesson is for subscribers
You've completed the free preview. Subscribe to unlock every lesson in every course.
Analyze Windows artifacts that track program execution including prefetch files, shimcache, amcache, and BAM/DAM for timeline reconstruction.
You've completed the free preview. Subscribe to unlock every lesson in every course.