Windows Forensic Analysis Toolkit Advanced Analysis Techniques for Windows 8

I am not an expert. I have never claimed to be an expert at anything, least of all when it comes to incident response and digital forensic analysis of Windows systems. I am simply someone who has found a deep, abiding interest in my chosen field of employment, and a bit of passion to make things more efficient for myself and develop a deeper understanding. I enjoy delving into and extending my analysis process, as well as exploring new ways to approach problems in the fields of digital forensic analysis and incident response. It was more than 16 years ago that I decided to focus on Windows systems specifically, in large part because no one else in the team I worked with at the time did so; we had folks who focused on routers and firewalls, as well as those who focused on Linux. However, almost no effort, beyond enabling configuration settings in the vulnerability scanner we used, was put toward really understanding Windows systems. As I moved from vulnerability assessments into incident response and digital forensic analysis, understanding what was happening “under the hood” on Windows systems, understanding what actions could create or modify certain artifacts, became a paramount interest. Even so, I am not an expert.