In this cheat sheet, we'll take a look at some of the key tools and techniques that can be used to perform Azure Incident Response.

The forensic value of MFT journals is that they can be used to find evidence of file creations, deletions, renames, etc.

While Windows forensics is widely covered via several courses and articles, there are fewer resources introducing it to the Linux Forensics