Deleted Evidence - Fill in the Map to Luke Skywalker

Deleted Evidence - Fill in the Map to Luke Skywalker

via YouTube Direct link

Windows Prefetch

11 of 12

11 of 12

Windows Prefetch

Class Central Classrooms beta

YouTube videos curated by Class Central.

Classroom Contents

Deleted Evidence - Fill in the Map to Luke Skywalker

Automatically move to the next video in the Classroom when playback concludes

  1. 1 Intro
  2. 2 Introductions
  3. 3 Causes of File Deletion
  4. 4 Recovering Deleted Attacker Files
  5. 5 NTFS Metadata Files: SMFT
  6. 6 NTFS Metadata Files: $130
  7. 7 Special Case - SDELETE
  8. 8 FileSystemFiles
  9. 9 Windows Defender - APT29 Case Study
  10. 10 Application Compatibility Cache
  11. 11 Windows Prefetch
  12. 12 Final Thoughts 2

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.