How to trace the user: Windows 10 Timeline
Introduction Windows 10 Timeline is a relatively new forensic artefact, which was introduced in Windows 10 version 1803.
About author
Zuzana Vargova
Zuzana is co-founder of IstroSec and works as a Senior Forensic Analyst. She has more than 9 years of experience in cyber security field, working in both governmental and commercial sector.
Zuzana has graduated in applied informatics at FEI STU in Bratislava, field of study Information Systems Security.
After graduation, she joined the government unit CSIRT.SK as a penetration tester. During her work at CSIRT.SK, she performed dozens of penetration tests of web applications and participated in several complex pentests of government infrastructures.
Zuzana gradually shifted from the field of offensive security to digital forensic analysis. Today she focuses on Windows forensics.
Author's posts