Practical Windows Forensics (PWF) - User Accounts Analysis

[@jamesgulleta5386]

Hi when did you take registry back up of infected machine? I could not find it in video

[@billyaminoumar2684]

please let me know if you find the way because it seems like a video was missing

[@bluecapesec]

The data collection is part of the course, but you can find instructions on how to go about disk and memory acquisition in the Github project readme: github.com/bluecapesecurity/PWF