Tags → #ransomware
-
Prefetch Files: Identifying Files Targeted by Data Extraction, Staging and Exfiltration
Prefetch files provide significant value to a forensic investigation and may assist in identifying files targeted as part of data extraction, staging and exfiltration.
-
The Case of Lost Files - VSS and KAPE
Ensure Volume Shaoow Copies are enabled. KAPE can be used to collect files within.
-
Directory Tree to Folder Paths
A script to convert a directory tree to folder paths. Work in Progress