![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1248/1*wXkiFD7blnWKCf8wRijutw.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/804/1*Ctltg53HHrKEuHW5uaBUxQ.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/fit/c/224/224/1*8mwpFuvWHSzQGWQ9aGjxqQ.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs](http://2.bp.blogspot.com/-P9oVPbcJCAo/UyprBuKRR-I/AAAAAAAB_YI/BhF2BKkx_H8/s1600/snap0629.jpg)
Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs
![Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs](http://4.bp.blogspot.com/-gJhWWBycEsY/UyprkMxp6fI/AAAAAAAB_YU/A07_fOFf6HI/s1600/snap0631.jpg)
Computer Forensics, Malware Analysis & Digital Investigations: EnCase EnScript to parse each NTUSER.DAT for RecentDocs
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1120/1*jFZucn_TOFNMhDu8o_cT_Q.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1260/1*zNhpt7oD8XKK9lcP-wcs0g.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/1240/1*UNJGU3SpGyDrFYCw6ap_7w.png)
Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium
![Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium Blue Team-System Live Analysis [Part 11]- Windows: User Account Forensics- NTUSER.DAT Rules, Tools, Structure, and Dirty Hives! | by Cyber Meisam [CM] | Medium](https://miro.medium.com/max/628/1*8NzZPMe4CjydrpkGPXY_4g.png)