https://www.windowsforensics.app/en 2026-10-07T22:58:17.157Z daily 1 https://www.windowsforensics.app/en/blog 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/artifacts 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/artifacts/cheat-sheet 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/tools 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/glossary 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/search 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/sitemap 2026-10-07T22:58:17.157Z weekly 0.7 https://www.windowsforensics.app/en/topics/acquisition-triage 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/registry 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/event-logs 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/evidence-of-execution 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/ntfs-file-system 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/user-activity 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/persistence 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/lateral-movement 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/usb-external-devices 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/memory-forensics 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/anti-forensics 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/topics/timeline-analysis 2026-10-07T22:58:17.157Z weekly 0.8 https://www.windowsforensics.app/en/blog/acquisition-and-triage-kape-velociraptor 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/active-directory-domain-controller-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/credential-access-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/detecting-windows-anti-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/hunting-windows-persistence 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/lateral-movement-rdp-psexec-winrm 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/ntfs-forensics-mft-usn-logfile 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/phishing-initial-access-motw-iso-lnk 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/remote-access-tools-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/srum-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/usb-device-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/user-activity-shellbags-lnk-jump-lists 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-browser-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-event-log-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-live-response 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-memory-forensics-volatility 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-registry-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/windows-search-index-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/building-a-super-timeline-with-plaso 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/evidence-of-execution 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/blog/getting-started-with-windows-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/bam-dam 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/bits-jobs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/bluetooth-devices 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/browser-artifacts 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/capability-access-manager 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/clipboard-history 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/crash-dumps 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/dpapi-credential-manager 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/etw-logs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/group-policy 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/hiberfil 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/i30-index 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/ifeo-winlogon 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/iis-web-server-logs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/installed-programs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/jump-lists 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/kernel-drivers 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/lnk-files 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/logfile 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/messaging-apps 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/microsoft-teams 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/mounted-disk-images 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/muicache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/network-profiles 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/notepad-tabstate 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/notification-database 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/ntds-dit-domain-controller 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/office-mru-trust-records 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/onedrive 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/opensave-lastvisited-mru 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/openssh-server 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/outlook-pst-ost 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/pagefile-swapfile 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/pe-files 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/powershell 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/print-spool-files 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/program-compatibility-assistant 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/rdp-bitmap-cache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/rdp-connections 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/recentdocs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/recentfilecache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/recycle-bin 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/registry-hives 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/remote-access-tools 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/run-keys-startup-folders 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/runmru 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/sam-user-accounts 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/scheduled-tasks 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/secure-sds 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/services 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/sticky-notes 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/syscache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/sysmon 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/thumbcache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/typedpaths-wordwheelquery 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/usb-devices 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/userassist 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/volume-shadow-copies 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-defender 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-error-reporting 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-firewall-logs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-recall 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-search-index 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-timeline 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/wmi-repository 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/wsl 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/zone-identifier 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/amcache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/mft 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/prefetch 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/shellbags 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/shimcache 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/srum 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/usn-journal 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/artifacts/windows-event-logs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/alternate-data-stream 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/anti-forensics 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/control-set 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/ese-database 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/etw 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/event-id 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/evidence-of-execution 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/file-carving 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/file-slack 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/filetime 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/jump-list-appid 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/last-write-time 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/lateral-movement 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/logon-type 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/lolbin 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/mark-of-the-web 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/mft-file-reference 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/ntfs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/ntuser-dat 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/persistence 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/registry-transaction-logs 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/resident-data 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/security-identifier 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/shell-item 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/sqlite-wal 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/standard-information-vs-file-name 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/super-timeline 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/triage-collection 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/unallocated-space 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/usrclass-dat 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/utc-and-local-time 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/volume-serial-number 2026-09-29T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/chain-of-custody 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/macb-timestamps 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/master-file-table 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/order-of-volatility 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/registry-hive 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/timestomping 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/volume-shadow-copy 2026-06-24T00:00:00.000Z monthly 0.6 https://www.windowsforensics.app/en/glossary/write-blocker 2026-06-24T00:00:00.000Z monthly 0.6