DFSP #003 - What the Shellbag!
Digital Forensic Survival Podcast - A podcast by Digital Forensic Survival Podcast - Martedì
Categorie:
In this episode we examine how to use Windows Shellbag records to help prove file use and knowledge. Shellbag records are created by certain user activity and can be used to show where a user has navigated to on a computer system and when they did so. Very powerful evidence!