DFE Module 06 – Windows Forensics Part 2

1234567891011121314
Across
  1. 2. File timestamps indicating when a file was Modified, Accessed, and Created
  2. 4. Tool that shows browsing history from Mozilla Firefox
  3. 8. Restore point log file recording installation or removal events
  4. 9. Tool that lists cookies stored by the Chrome browser
  5. 10. Tool that lists cookies stored by Mozilla Firefox
  6. 11. Tool used to extract metadata from images, documents, and media files
  7. 12. File that stores information about recently executed programs
  8. 13. Tool that reads cached files from Internet Explorer or Edge
  9. 14. Tool that shows visited websites and browsing history in Chrome
Down
  1. 1. Tool used to collect slack space data across an entire partition
  2. 2. Tool that displays cache data from Mozilla Firefox
  3. 3. Tool that displays the list of cached files stored by Google Chrome
  4. 5. Memory analysis tool used to identify malicious activity and processes
  5. 6. Tool that lists cookies stored by Microsoft Edge
  6. 7. Tool that displays browsing history across multiple browsers