{"version":1,"pages":[{"id":"mW6kcAl3WmhcC31D9jJb","title":"Artifacts","pathname":"/digital-forensics-wiki","siteSpaceId":"sitesp_Guiqr","description":"","breadcrumbs":[{"label":"Welcome","emoji":"1f604"}]},{"id":"u8AFPv0bSbHkT0hWvKKj","title":"$Recycle.bin","pathname":"/digital-forensics-wiki/windows/usdrecycle.bin","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"SrWlVeUiJgFMGKkB8Kf3","title":"EventLog","pathname":"/digital-forensics-wiki/windows/eventlog","siteSpaceId":"sitesp_Guiqr","description":"","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"4t53s2hHSyYW8qFA3eKA","title":"원격 유입","pathname":"/digital-forensics-wiki/windows/eventlog/undefined","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"},{"label":"EventLog"}]},{"id":"s1iC1WnlJTKa3lMHCaUs","title":"응용프로그램 실행","pathname":"/digital-forensics-wiki/windows/eventlog/undefined-1","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"},{"label":"EventLog"}]},{"id":"VSXLDbvCihW45LKjXn9c","title":"LNK","pathname":"/digital-forensics-wiki/windows/lnk","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"T5m1amwFRWduhJHQQscL","title":"PowerShell","pathname":"/digital-forensics-wiki/windows/powershell","siteSpaceId":"sitesp_Guiqr","description":"(1) 파워셸의 개요 및 파워셸을 활용한 공격","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"v5MksFb0z7sAvVrmyGan","title":"PowerShell Version and Logging","pathname":"/digital-forensics-wiki/windows/powershell/powershell-version-and-logging","siteSpaceId":"sitesp_Guiqr","description":"(2) 파워셸 버전에 따른 로깅 차이","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"},{"label":"PowerShell"}]},{"id":"e6bpw6TJJZ5EiBtbBxkw","title":"PagePowerShell Script Block Logging","pathname":"/digital-forensics-wiki/windows/powershell/pagepowershell-script-block-logging","siteSpaceId":"sitesp_Guiqr","description":"(3) 스크립트 블록 로깅 활성화 시 로깅 차이","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"},{"label":"PowerShell"}]},{"id":"1korcNAyhvypGvrxknsk","title":"Prefetch","pathname":"/digital-forensics-wiki/windows/prefetch","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"sJNMZgUTeBAxqwywssbY","title":"Registry","pathname":"/digital-forensics-wiki/windows/registry","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"ZvLIKFEEPXd4IfkuqtJX","title":"WebBrowser (Chrome)","pathname":"/digital-forensics-wiki/windows/webbrowser-chrome","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]},{"id":"8cKSjKcwiWunFNoZeyQz","title":"WER","pathname":"/digital-forensics-wiki/windows/wer","siteSpaceId":"sitesp_Guiqr","breadcrumbs":[{"label":"Windows","emoji":"1fa9f"}]}]}