THM Room: Windows Forensics

Introduction

What?

Investigating Windows, Windows registry forensics

Why?

Gathering evidence of activities.

How?

• A Windows server

• Organisation X desktop