BlackBag Blog Exploring the Windows Activity Timeline, Part 3: Clipboard Craziness

By: Vico Marziale (@vicomarziale), Senior Digital Forensics Researcher Introduction In the previous posts, Part 1 and Part 2, we have seen that the Windows Activity Timeline (just "Timeline" from here on out) source database, ActivitiesCache.db, stores reams...The post Exploring the Windows Activity Timeline, Part 3: Clipboard Craziness appeared first on BlackBag.