Digital Forensic Scientist

less than 1 minute read

TryHackMe recently released a room dedicated to Windows Forensics! We do a walkthrough of the TryHackMe WindowsForensics1 room and learn all about the Windows Registry in digital investigations. This room covers Windows Registry Hive locations, software tools used for investigation, Windows Registry artifacts, and their meanings. Learn to analyze UserAssist, MRUs, ShellBags, external devices, and so much more.

Sign up for the room free here to follow along: https://tryhackme.com/room/windowsforensics1

I had a lot of fun with this room. I hope you did too! Let me know if you would like to see more digital forensic walkthroughs, and don’t forget to subscribe!

👍 Subscribe for weekly videos

❤️ Get early access and bonus content - https://bit.ly/DFIRSciMember

You may also enjoy

iLEAPP and RLEAPP updates and dev thoughts

Alex (@kviddy) has been pushing some extremely useful updates to the open-source Android forensic tool - [ALEAPP](https://github.com/abrignoni/ALEAPP]. Speci...

What data can you find in RAM?

To determine if you need to collect Random Access Memory on-scene, it is useful to know what kinda of investigation-relevant data is often available in RAM.

Modular artifact scripts coming to iLEAPP

kviddy has been pushing some great core updates to ALEAPP. Specifically, artifact scripts are now self-contained. This means that script authors no longer ne...