Correlating Windows 11 forensic artefacts (Prefetch, Event Logs, ShellBags) to reconstruct user activity. MSc Cyber Security & Forensics dissertation, University of Westminster
-
Updated
Aug 18, 2026 - PowerShell
Correlating Windows 11 forensic artefacts (Prefetch, Event Logs, ShellBags) to reconstruct user activity. MSc Cyber Security & Forensics dissertation, University of Westminster
Add a description, image, and links to the shellbags topic page so that developers can more easily learn about it.
To associate your repository with the shellbags topic, visit your repo's landing page and select "manage topics."