- Forensics Part 4: The Digital Post-Mortem — Healing the City
- Forensics Part 3: Timelining the Intrusion — Connecting the Shadows
- Forensics Part 2: The Memory Trace — Analyzing the Ghosts in the RAM
- Forensics Part 1: The Artifacts of Truth — Beyond Standard Logging
- The Dojo Part 4: The First Strike — Capturing the Ghost
- ACTIVE-DIRECTORY (65)
- HYPER-V (2)
- INFO (1)
- MAHARJAN-BINOD (2)
- MAHARJAN-DEFAULT (1)
- MFA-ADSELFSERVICE PLUS (3)
- MICROSOFT-365 (17)
- M365 CROSS-TENANT (2)
- ONEDRIVE FOR BUSINESS (1)
- SHAREPOINT-ONLINE (12)
- MICROSOFT-AZURE (12)
- MICROSOFT-EXCHANGE (23)
- EXCHANGE-ONLINE (2)
- EXCHANGE-ONPREMISE (17)
- SUBSCRIPTION EDITION (SE) (3)
- MICROSOFT-INTUNE (0)
- NETWORKING (2)
- Office Online Server (OOS) (7)