Me: "When in use, Windows Remote Desktop caches images of the display of the connected machine. This is done to improve performance. This cached data can be viewed with software to possibly recover in...
Step 1: Search Windows digital forensic artifacts on Google
Step 2: Find popular artifact example (Prefetch, RunOnce, SRUM...)
Step 3: Write engagement tweet
Step 4: Repeat as such
Step 5: ???
Step 6: PROFIT!!!
Step 2: Find popular artifact example (Prefetch, RunOnce, SRUM...)
Step 3: Write engagement tweet
Step 4: Repeat as such
Step 5: ???
Step 6: PROFIT!!!
1