Skip to content

WindowsForensics

Guides Artifacts Tools Areas Glossary Search

Home
Contact

Contact

The fastest way to reach us:

Email: contact@windowsforensics.app

Postal address

Windows Forensics
1 Example Street
75000 Paris
FR

WindowsForensics

An independent field reference for Windows digital forensics and incident response.

Educational content for defenders. Always follow your organisation's legal and evidence-handling procedures.

Areas

01Acquisition & Triage
02Registry
03Event Logs
04Evidence of Execution
05NTFS & File System
06User Activity
07Persistence
08Lateral Movement
09USB & External Devices
10Memory Forensics
11Anti-Forensics
12Timeline Analysis

Resources

Guides
Artifacts
Printable cheat sheet
Tools
Glossary
Search
Sitemap
RSS
Contact

© 2026 Windows Forensics. All rights reserved. Windows is a trademark of Microsoft Corporation; this site is not affiliated with Microsoft.

Privacy Terms contact@windowsforensics.app