FOR500 Windows Forensic Analysis | 8174F031D5EB2E144C5D191860E0DBFEDBA3E60A

FOR500 Windows Forensic Analysis

Name	FOR500 - Windows Forensic Analysis	DOWNLOAD Copy Link Trouble downloading? see How To
Total Size	86.7 GB
Total Files	101
Last Seen	2025-07-21 00:04
Hash	8174F031D5EB2E144C5D191860E0DBFEDBA3E60A

/LIVE 2021/
Day 1.mp4	808.2 MB
Day 2.mp4	799.4 MB
Day 3.mp4	784.4 MB
Day 4.mp4	578.0 MB
Day 5.mp4	464.3 MB
Day 6.mp4	104.6 MB
/PDF 2022/
FOR500_H01_02.pdf	318.0 MB
/.../500.21.1B/
VERSION-FOR500-21-1B.TXT	1.0 KB
/.../Reed_Richards_Challenge/
Reed_Richards_Challenge.7z	3.9 GB
/.../500.21.1B/Stack_Challenge/
Stack_Memory_Image.7z	873.8 MB
/.../Stack_Disk_Image/
Stack001_Surface_HDD.E01	16.4 GB
Stack001_Surface_HDD.E01.txt	1.4 KB
/.../500.21.1B/Stack_Challenge/Stack_Precooked/
Stack_AXIOM_HDD_Precooked.7z	1.8 GB
Stack_AXIOM_Memory_Precooked.7z	215.0 MB
/.../500.21.2A/
VERSION-FOR500-21-2A.txt	11.5 KB
Windows SIFT Workstation.7z	58.7 GB
Windows SIFT Workstation.md5	0.1 KB
/.../Documents and Cheat Sheets/
EricZimmermanCommandLineToolsCheatSheet-v1.0.pdf	55.3 KB
Hex_and_Regex_Cheatsheet-v1.0.pdf	29.1 KB
SQlite-PocketReference.pdf	1.1 MB
Windows DFIR VM Tool List.xlsx	68.1 KB
WindowsForensicAnalysis_Poster.pdf	1.5 MB
ZimmermanTools_Poster.pdf	2.7 MB
/.../500.21.2A/Extras/
prefetch_hashes_lookup.zip	293.7 KB
/.../Event-Log-Explorer-Templates/
ELEX-Security-Log-508-Custom-Columns_Any-Language.ccols	1.1 KB
ELEX-Security-Log-508-Custom-Columns_English.ccols	1.5 KB
ELEX-Security-Log-Color-Coding.ecc	1.7 KB
ELEX-System-Log-Color-Coding.ecc	0.8 KB
ELEX-System-Log-Custom-Columns_Any-Language.ccols	0.6 KB
/.../500.21.2A/Install Tools/
7zip.exe	1.4 MB
/.../500.21.2A/Install Tools/Keka/
Keka-7zip-MacOs.dmg	25.8 MB
/.../500.21.2A/Install Tools/VMware/
VMware-workstation-full-15.5.exe	567.3 MB
/.../Tools - Live Acquisition/
DumpIt.exe	535.2 KB
EDDv300.exe	195.9 KB
EDDv300.exe.config	0.2 KB
MagnetRAMCapture.exe	351.6 KB
/.../Tools - Live Acquisition/FTK Imager/
ad_globals.dll	231.8 KB
ad_log.dll	454.5 KB
adefs.dll	1.2 MB
adencrypt_gui.exe	300.9 KB
adencrypt.dll	340.8 KB
adfbfs_globals.dll	180.1 KB
adfs_globals.dll	58.7 KB
ADG_EULA.rtf	146.2 KB
ADIso.exe	162.1 KB
ADIsoDLL.dll	141.7 KB
adshattrdefs.dll	783.7 KB
adtz_globals.dll	109.9 KB
boost_chrono-vc140-mt-1_59.dll	51.6 KB
boost_date_time-vc140-mt-1_59.dll	89.4 KB
boost_filesystem-vc140-mt-1_59.dll	166.2 KB
boost_regex-vc140-mt-1_59.dll	1.1 MB
boost_system-vc140-mt-1_59.dll	40.8 KB
boost_thread-vc140-mt-1_59.dll	149.9 KB
FTK Imager.exe	22.6 MB
icudt57.dll	30.1 MB
icuuc57.dll	1.5 MB
IsoBuster.dll	1.8 MB
libbfio.dll	789.3 KB
libeay32.dll	1.6 MB
libvshadow.dll	215.4 KB
LMS-FS.dll	1.8 MB
LMS.dll	4.8 MB
ProfUISad64.dll	20.6 MB
/.../Tools - Live Acquisition/FTK Imager/help/enu/
FTKImager_UserGuide.pdf	647.0 KB
/.../Tools - Live Acquisition/FTK Imager/langs/
chs_adencrypt.dll	22.9 KB
chs_adshattrdefs.dll	231.3 KB
chs_ftki.dll	1.6 MB
deu_adencrypt.dll	23.4 KB
deu_adshattrdefs.dll	293.7 KB
deu_ftki.dll	1.7 MB
esp_adencrypt.dll	23.4 KB
esp_adshattrdefs.dll	306.0 KB
esp_ftki.dll	1.7 MB
fra_adencrypt.dll	23.4 KB
fra_adshattrdefs.dll	299.9 KB
fra_ftki.dll	1.7 MB
ita_adencrypt.dll	23.4 KB
ita_adshattrdefs.dll	296.3 KB
ita_ftki.dll	1.7 MB
jpn_adencrypt.dll	22.9 KB
jpn_adshattrdefs.dll	244.1 KB
jpn_ftki.dll	1.6 MB
kor_adencrypt.dll	22.9 KB
kor_adshattrdefs.dll	242.5 KB
kor_ftki.dll	1.6 MB
nld_adencrypt.dll	23.4 KB
nld_adshattrdefs.dll	290.7 KB
nld_ftki.dll	1.7 MB
ptb_adencrypt.dll	23.4 KB
ptb_adshattrdefs.dll	297.8 KB
ptb_ftki.dll	1.7 MB
sve_adencrypt.dll	23.4 KB
sve_adshattrdefs.dll	282.5 KB
sve_ftki.dll	1.7 MB
trk_adencrypt.dll	23.4 KB
trk_adshattrdefs.dll	282.5 KB
trk_ftki.dll	1.7 MB
/.../Tools - Live Acquisition/FTK Imager/LGPL/libbfio/
readme_lgpl.txt	0.2 KB
/.../Tools - Live Acquisition/FTK Imager/LGPL/libvshadow/
readme_lgpl.txt	0.2 KB
/.../Tools - Live Acquisition/KAPE/
kape.zip	127.1 MB
Total files 101