DFSP #003 - What the Shellbag!

21/03/2016 28 min
DFSP #003 - What the Shellbag!

Listen "DFSP #003 - What the Shellbag!"

Episode Synopsis

In this episode we examine how to use Windows Shellbag records to help prove file use and knowledge. Shellbag records are created by certain user activity and can be used to show where a user has navigated to on a computer system and when they did so. Very powerful evidence!