Forensic Readiness

Exercises

• Windows Event Logs

• Windows Sysmon

• Sysmon: Capture Clipboard

• Sysmon: Proccess Injection

Chapters

• Ransomware Detection