fxploit / FOREST-WE

Team Project

Browser.py

• Chrome
• Edge
• IE

FileSystem.py

• $MFT
• $LogFile
• $UsnJrnl

ParserTest.py

• RecentDocs
• OfficeRecentFiles
• HWPRecentFiles
• Shortcut(LNK) Files
• JumpLists
• Prefetch
• PowerShell Event
• Succes/Fail Logons
• RDP Usage
• Windows Defender
• 실행프로그램
• 스케쥴러
• 시스템 시간조작
• WER
• RecycleBin
• Registry - x
• Amcache - x
• ActivitiesCache.db - x