ThinkDFIR

Sometimes Windows and PE Version information don’t get along

Cached screenshots on Windows 11

Sunday Funday – Searching for searching

SRUMday Funday!

Windows11 Wordwheelquery Woes

How can I be of WebAssist(ance)?

CPY JMP

Timestamps in INDX Entries

Tracking screenshots with LNK files

I can see and hear you seeing and hearing me!