5.1 Investigating NIST Data Leakage

5.1.1 Environment Setting Up

5.1.2 Windows Registry

5.1.3 Windows Event and XML

5.1.4 Web History and SQL

5.1.5 Email Investigation

5.1.6 File Change History and USN Journal

5.1.7 Network Evidence and shellbang

5.1.8 Network Drive and Cloud

5.1.9 Master File Table ($MFT) and Log File ($logFile) Analysis

5.1.10 Windows Search History

5.1.11 Windows Volume Shadow Copy Analysis/SQL database carving

5.1.12 Recycle Bin and Anti-Forensics

5.1.13 Data Carving

5.1.13-data-carving.md

5.1.14 Crack Windows Passwords

5.1.14-crack-windows-passwords.md

---

Home ⋅ Work ⋅ Thoughts