What is the Event ID number for a standard logon?
Objectives: Perform Registry analysis Investigate Windows Events Search for evidence of antiforensic activity Resources needed: Windows forensics workstation FTK Imager Autopsy Registry Viewer Peterson Windows hard disk image Files from Canvas Lab 11 link Overview: In this lab we are going to dig into Norm’s Windows hard drive to see if he was attempting to […]