https://stream.echo6.co/videos/watch/5bec4081-7afb-459f-8711-cba6780801a0 https://www.tcm.rocks/psap-y - Have you checked out our intermediate-level defensive security cert, the Practical SOC Analyst Professional (PSAP) yet? This cert focuses on threat hunting as well as incident response. We have more blue team content on the roadmap for 2026 as well! Every time you interact with your digital devices, you're leaving behind evidence of that interaction. Evidence of program execution, file downloads, even your physical location. So how exactly does this work?! Enter the world of digital forensics. In this video, Andrew Prince provides a detailed introduction to digital forensics, even digging into the history of modern forensic science. Enjoy this video? Make sure to hit that subscribe button to see more from the TCM Security team. #dfir #forensics #digitalforensics #cybersecurity #blueteam Timestamps: 00:00 - Introduction 01:07 - Locard’s Exchange Principle 04:52 - The BTK Killer: A Case Study 06:39 - Physical vs Digital Evidence 08:37 - Simulating Forensic Artifacts 17:20 - Wiping Files 21:35 - Analyzing the Evidence 22:20 - Last User Login Time 24:40 - Analyzing "Dirty" Hives 25:50 - RunMRU 26:50 - RecentDocs 28:30 - Office File MRU 29:35 - Trusted Documents 30:25 - Reading Location 33:45 - OpenSavePidlMRU and LastVisitedPidlMRU 35:00 - LNK Files 36:20 - Windows Prefetch 38:01 - Examining File Wiping Execution 40:55 - MFT and USN Journal 42:13 - Alternate Data Streams (ADS) 43:42 - USN Journal Analysis 45:45 - Conclusion Sponsor a Video: https://www.tcm.rocks/Sponsors Pentests & Security Consulting: https://tcm-sec.com Get Trained: https://academy.tcm-sec.com Get Certified: https://certifications.tcm-sec.com Merch: https://merch.tcm-sec.com 📱Social Media📱 X: https://x.com/TCMSecurity Twitch: https://www.twitch.tv/thecybermentor Instagram: https://www.instagram.com/tcmsecurity/ LinkedIn: https://www.linkedin.com/company/tcm-security-inc/ TikTok: https://www.tiktok.com/@tcmsecurity Discord: https://discord.gg/tcm Facebook: https://www.facebook.com/tcmsecure Mon, 13 Apr 2026 20:31:10 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://stream.echo6.co https://stream.echo6.co/client/assets/images/icons/icon-512x512.png https://stream.echo6.co/videos/watch/5bec4081-7afb-459f-8711-cba6780801a0 All rights reserved, unless otherwise specified in the terms specified at https://stream.echo6.co/about and potential licenses granted by each content's rightholder.