Cyber security – Cyber Security’s main function is to protect computer systems and networks from malicious attacks. It is important to have the correct cyber security measures in place to minimize the risk of attack. Within a Windows OS, there are many artifacts valuable to identifying events that have occurred and any potential security risks:

  • Event Logs
  • File systems
  • Registry
  • Network artifacts
  • Memory artifacts
  • User activity
  • Authentication and log on data
  • Browser artifacts
  • Scheduled tasks
  • Malware artifacts
  • System structure and configuration