Microsoft's has released a nice little "Guide" (Multipage Cheat Sheet) to Windows artifacts that you can/should collect during IR.
https://www.microsoft.com/en-us/security/blog/2024/04/23/new-microsoft-incident-response-guide-helps-simplify-cyberthreat-investigations/
Shecky - Third Wheel and town fool /
npub1sl…7hpak
2024-04-24 15:25:45
Author Public Key
npub1sln95peuu0anz3tu3999j2k7309w4p2d55lms7g0h875xkfqfp3q87hpakSeen on
wss://relay.nostr.band