Yogesh Khatri (@swiftforensics) 's Twitter Profile
Yogesh Khatri

@swiftforensics

DFIR R&D guy

ID: 313268687

linkhttp://swiftforensics.com calendar_today08-06-2011 11:57:04

548 Tweet

2,2K Followers

124 Following

Yogesh Khatri (@swiftforensics) 's Twitter Profile Photo
Yogesh Khatri
@swiftforensics

2 years ago

Windows Thumbnail caches are a mostly unused artifact. Did you know they can point to paths on external systems? (Yes path embedded in thumbcache file, not from win search db) Can be helpful when threat actors actively delete logs and other artifacts! #DFIR

Windows Thumbnail caches are a mostly unused artifact. Did you know they can point to paths on external systems? (Yes path embedded in thumbcache file, not from win search db) Can be helpful when threat actors actively delete logs and other artifacts! #DFIR