verboten - bi0sCTF 2024 sp3p3x jl_24 2024-03-08 Forensics tl;dr Registry Hives analysis Analyse Chrome browser artifacts Analyse Slack artifacts Analyse AnyDesk artifacts Analyse artifacts for evidence of execution Analyse clipboard artifacts Read More Incident Response USB Slack Windows Activity timeline bi0sCTFs AnyDesk prefetch Chrome