Investigation Scenario 🔎 While investigating potential intellectual property theft, you discover the pictured registry artifact on a Windows 11 system. The user claims they only connected a USB-C docking station. What do you look for to investigate whether an incident occurred? Extra credit for focusing on the distinct order of operations you would take. #InvestigationPath #DFIR #SOC