Following on from the previous [DFIR TOOLS] posts. This time we we are going to talk about one of my favourite tools EvtxECmd. So, what does Mr Zimmerman say about it:- But it is way more than just that, coupled with ‘Timeline Explorer’ it is a ridiculously powerful tool. Before I get into it there … Continue reading [DFIR TOOLS] EvtxECmd, what is it & how to use!