# PLAINBIT

## Artifacts

- [Artifacts](https://plainbit.gitbook.io/digital-forensics-wiki/mainpage/artifacts.md)
- [$Recycle.bin](https://plainbit.gitbook.io/digital-forensics-wiki/windows/usdrecycle.bin.md)
- [EventLog](https://plainbit.gitbook.io/digital-forensics-wiki/windows/eventlog.md)
- [원격 유입](https://plainbit.gitbook.io/digital-forensics-wiki/windows/eventlog/undefined.md)
- [응용프로그램 실행](https://plainbit.gitbook.io/digital-forensics-wiki/windows/eventlog/undefined-1.md)
- [LNK](https://plainbit.gitbook.io/digital-forensics-wiki/windows/lnk.md)
- [PowerShell](https://plainbit.gitbook.io/digital-forensics-wiki/windows/powershell.md): (1) 파워셸의 개요 및 파워셸을 활용한 공격
- [PowerShell Version and Logging](https://plainbit.gitbook.io/digital-forensics-wiki/windows/powershell/powershell-version-and-logging.md): (2) 파워셸 버전에 따른 로깅 차이
- [PagePowerShell Script Block Logging](https://plainbit.gitbook.io/digital-forensics-wiki/windows/powershell/pagepowershell-script-block-logging.md): (3) 스크립트 블록 로깅 활성화 시 로깅 차이
- [Prefetch](https://plainbit.gitbook.io/digital-forensics-wiki/windows/prefetch.md)
- [Registry](https://plainbit.gitbook.io/digital-forensics-wiki/windows/registry.md)
- [WebBrowser (Chrome)](https://plainbit.gitbook.io/digital-forensics-wiki/windows/webbrowser-chrome.md)
- [WER](https://plainbit.gitbook.io/digital-forensics-wiki/windows/wer.md)