- Tools: Registry Explorer, Event Log Explorer, NTFS Log Tracker, MFTECmd, VirusTotal
- Technical Concepts: Group Policy Objects (GPOs), Windows Defender Exclusions, Scheduled Tasks, Windows Management Instrumentation (WMIC), Windows Boot Manager, Wiper Malware, Update Sequence Number (USN)
- References:
* Registry Explorer: Download Link
* Event Log Explorer: Download Link
* NTFS Log Tracker: Download Link
* MFTECmd: Download Link
* VirusTotal: https://www.virustotal.com/gui/