Skip to content

Instantly share code, notes, and snippets.

@richaarya
richaarya / Forensic_Artifacts.md
Last active February 19, 2025 15:28
List of Forensic Artifacts useful for DFIR community.

This is a list of forensic artifacts that can be used by DFIR community to perform cyber investigations.

USB Devices Log Files:

  • XP - c:\windows\setupapi.log
  • W7+ - c:\windows\inf\setupapi.dev.log

Recycle Bin:

  • c:$Recycle.Bin*
  • c:\Recycler*