- Extract Invalid Login timestamp from the windows registry.
- Extract the timestamp of when a JPEG was opened.
- Extract Google Chrome’s last run time which was pinned to taskbar from windows registry.
- Extract process last run time from the windows registry.
- Extract process run count from the windows registry.
- Chrome history analysis
- File recovery from the memory dump
- Raw analysis of email content
- Environment variables analysis
- RAR password cracking
- Corrupted file analysis
- Master File Table Analysis
- Deleted file data recovery