With a little bit digging you can discover treasure trove of information, which can be utilized in your digital forensic investi
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/628/1*8NzZPMe4CjydrpkGPXY_4g.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs](http://3.bp.blogspot.com/-r0hQu2_oTPc/Uyprjurs5sI/AAAAAAAB_YQ/mzKNtlcWjY4/s1600/snap0630.jpg)
Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1248/1*wXkiFD7blnWKCf8wRijutw.png)