Networking
- Networking
Windows
Linux
Enterprise Architecture
Mac
- Forensics
  - Page 3
Attacker Information
IR Playbook
- Activity from Unmanaged Host
- Recommendations
Reverse Engineering
- Python - Pyinstaller

Powered by GitBook

On this page

Parse Data
Considerations
Anti-Forensics

Windows

Forensics

Event Logs

LOLBins

Crashes (WER)

PreviousWebDav NextPowerShell

Last updated 1 year ago

File Location:

C:\Programdata\Microsoft\Windows\WER
C:\Users\USERNAME\Appdata\Local\Microsoft\Windows\WER
- Check default, public, and all user profiles for crash reports.

Parse Data

Considerations

Anti-Forensics