🧰 Windows 10

The items that name it 8

• Digital Forensics: Analyzing Windows Prefetch Files for Evidence
  article2026-10-29It is written here as Windows 10 (example Prefetch directory C:\Windows\Prefetch).

  example Prefetch directory C:\Windows\Prefetch

• Microsoft Windows NCSI Cross-Context Proxy Authentication Coercion - ZDI-26-708 - Part 1
  writeup2026-09-28

  NCSI implemented by NLA service (Network Location Awareness) instead of netprofm

• CrystalPotato
  repo2026-08-27

  affected by SeImpersonatePrivilege local privilege escalation via CrystalPotato

• Insights into Suspected DPRK Workers
  writeup2026-08-26

  Group policy editor searched by suspected DPRK worker; Windows Registry and Security Event Logs used to identify USB device connections (PiKVM, Guermok)

• HEVD Windows Kernel Exploitation Tutorial
  writeup2026-07-31

  Used as both debugger host and debuggee VM for kernel debugging exercise

• Fantastic clear-text passwords and where to collect them (Part 2 - Windows)
  writeup2026-06-28

  Introduces Protected Event Logging to encrypt sensitive event log data.

• Creating a Red & Blue Team Homelab
  writeup2021-03-04

  Used as workstation joined to the Active Directory domain

• Dev Machine Guard Now Supports Windows - StepSecurity
  article

  Developer machines, now supported by Dev Machine Guard