Windows Artifacts and Registry

Registry hives, USBSTOR, ShellBags, LNK files, Prefetch, AmCache/ShimCache, Jump Lists, Event Logs (4624/4625/7045), VSS, Sysmon and Eric Zimmerman tools.

• Time
  40 minutes
• Difficulty
  mixed

You can start immediately — your progress will be saved automatically. Sign-in is required to save scores against your profile.