Module 7 – Analysis with Windows File Analyzer

Module 7 – Analysis with Windows File Analyzer

Windows File Analyzer (WFA)

Process Windows artifacts for analysis

• Thumbs.db
• Prefetch
• Shortcuts
• Index.dat
• Recycle Bin

Download: https://www.mitec.cz/wfa.htmlUsing WFA to Analyze Shortcuts:

1. Select Analyze Shortcuts
2. Browse to the folder
3. Select Recent File
4. Click OK