Windows forensics¶ Event logs¶ Windows RDP-Related Event Logs: Identification, Tracking, and Investigation by Jonathon Poling on the blog Ponder the Bits. Resources¶ Windows forensics by neolea 2025 Guide to Registry Forensics Tools