> For the complete documentation index, see [llms.txt](https://cas-cyber.gitbook.io/cas-cybersecurity/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cas-cyber.gitbook.io/cas-cybersecurity/forensic-readiness.md).

# Forensic Readiness

![](/files/it8aHr21culkBE4CyxkE)

### Exercises

* [Windows Event Logs](/cas-cybersecurity/forensic-readiness/windows-event-logs.md)
* [Windows Sysmon](/cas-cybersecurity/forensic-readiness/windows-sysmon.md)
* [Sysmon: Capture Clipboard](/cas-cybersecurity/forensic-readiness/sysmon-capture-clipboard.md)
* [Sysmon: Proccess Injection](/cas-cybersecurity/forensic-readiness/sysmon-process-injection.md)

### Chapters

* [Ransomware Detection](/cas-cybersecurity/forensic-readiness/ransomware-detection.md)