Filtered View

Tag: #windows-forensics

1 posts

Forensics HTB Sherlock

HTB Sherlock: CrownJewel-1

VSS, an NTDS.dit copy, and four artifacts to piece it together. My quick notes from CrownJewel-1.

#htb#sherlocks#blue-team#dfir
2 min read