DFSP #003 - What the Shellbag!
Digital Forensic Survival Podcast - En podcast af Digital Forensic Survival Podcast - Tirsdage
Kategorier:
In this episode we examine how to use Windows Shellbag records to help prove file use and knowledge. Shellbag records are created by certain user activity and can be used to show where a user has navigated to on a computer system and when they did so. Very powerful evidence!