| 1. Welcome and Introduction/1.Welcome and Introduction.ts |
367.13MB |
| 2. Initial Setup/2.Initial Setup.ts |
543.53MB |
| 3. Windows Event Logs/00. Support - Onehack.Us.txt |
0.09kB |
| 3. Windows Event Logs/3. Fundamentals.ts |
259.70MB |
| 3. Windows Event Logs/4. In-depth Analysis.ts |
549.43MB |
| 3. Windows Event Logs/5. Tools and Best Practices.ts |
443.00MB |
| 4. The Registry/6. Fundamentals.ts |
351.55MB |
| 4. The Registry/7. NTUSER.DAT.ts |
377.51MB |
| 4. The Registry/8. UsrClass.dat and ShellBags.ts |
311.20MB |
| 4. The Registry/9. USB Forensics, Networks, and More.ts |
230.81MB |
| 4. The Registry/10. Scalable Analysis.ts |
183.08MB |
| 5. Evidence of Execution/11. Introduction.ts |
50.10MB |
| 5. Evidence of Execution/12. Prefetch.ts |
571.83MB |
| 5. Evidence of Execution/13. Shimcache.ts |
319.04MB |
| 5. Evidence of Execution/14. AmCache.ts |
284.34MB |
| 5. Evidence of Execution/15. PCA.ts |
33.32MB |
| 5. Evidence of Execution/16. MUICache.ts |
91.62MB |
| 5. Evidence of Execution/17. UserAssist.ts |
170.36MB |
| 5. Evidence of Execution/18. SRUM.ts |
211.57MB |
| 6. Persistence, Privilege Escalation, and Lateral Movement/19. Services and Scheduled Tasks.ts |
347.26MB |
| 6. Persistence, Privilege Escalation, and Lateral Movement/20. LSASS, NTDS.dit, WDigest.ts |
176.94MB |
| 6. Persistence, Privilege Escalation, and Lateral Movement/21. SMB, RDP, WMI, PsExec, UAL.ts |
271.74MB |
| 7. Anatomy of NTFS/22. Introduction.ts |
46.03MB |
| 7. Anatomy of NTFS/23. Metafiles, MFT, Journaling, ADS.ts |
310.10MB |
| 7. Anatomy of NTFS/24. MACB Timestamps.ts |
173.56MB |
| 7. Anatomy of NTFS/25. Parsing the MFT and USN Journal.ts |
214.53MB |
| 7. Anatomy of NTFS/26. $I30 Index Attributes.ts |
40.10MB |
| 8. File Deletion and Recovery/27. The Recycle Bin.ts |
32.95MB |
| 8. File Deletion and Recovery/28. 'Permanent' Deletion.ts |
127.47MB |
| 9. LNK Files and Jump Lists/29. LNK Files.ts |
211.05MB |
| 9. LNK Files and Jump Lists/30. Jump Lists.ts |
138.96MB |
| 10. Additional Content/01. Support - Onehack.Us.txt |
0.09kB |
| 10. Additional Content/31. Web Browser Forensics.ts |
280.64MB |
| 10. Additional Content/32. Thumbs.db and Thumbcache.ts |
217.86MB |
| Extra/0. Support - Onehack.Us.txt |
0.09kB |
| Extra/ccnp security firewall notes.pdf |
6.20MB |
| Extra/ccnp security secure notes.pdf |
769.61kB |
| Extra/ccnp security sisas notes.pdf |
6.51MB |
| Extra/cisco vpn chart.pdf |
52.95kB |
| Extra/impacket exec commands cheat sheet.pdf |
576.85kB |
| Extra/impacket exec commands cheat sheet poster.pdf |
1.70MB |
| Extra/ntfs file record.pdf |
1.36MB |
| Extra/rdp flowchart.pdf |
188.27kB |
| Extra/splunk manual.pdf |
695.76kB |
| Extra/windows browser artifacts cheat sheet.pdf |
265.95kB |
| Extra/windows event log cheat sheet.pdf |
178.58kB |
| Extra/windows process genealogy v2.pdf |
167.24kB |
| Extra/windows registry cheat sheet.pdf |
260.16kB |
| Support - Onehack.Us.txt |
0.09kB |
SunRiseZone
