Forensics

• Decoding Powershell Base64

• Microsoft Teams forensic artifacts

• Warlocksmurf's writeups

• Encient's writeups

• Extracting data from MFT

• Volatility3 Cheatsheet

• MagnetCTF 2024 writeups