Updated on 26 Feb, 2026 If you waana know more about SRUM do checkout my previous articles! https://www.cyberengage.org/post/srum-the-digital-detective-in-windows Intro You've heard about SRUM. You know it tracks application usage, network activity, and energy data going back 30 days. But knowing it exists and actually getting useful evidence out of it are two different things. In this article we're going to walk through the whole process from scratch We're using ESEDatabaseV

Updated on 25 Feb, 2026 Intro In this article on SRUM we covered the basics — what the database is, why it matters for digital forensics, and a few real-world cases where it changed everything. But if you're doing serious incident response or forensic analysis, the basics only take you so far. The deeper you go into SRUM, the more useful it becomes — and the more edge cases you run into. What does SRUM actually track? Where does the data live before it's written to the databa

Intro In this article on SRUM we covered the basics — what the database is, why it matters for digital forensics, and a few real-world cases where it changed everything. But if you're doing serious incident response or forensic analysis, the basics only take you so far. The deeper you go into SRUM, the more useful it becomes — and the more edge cases you run into. What does SRUM actually track? Where does the data live before it's written to the database? What changed between

Today marks the beginning of an exciting new chapter in my professional journey as I join Ankura as Cybersecurity Incident response,...

In today's digital landscape, cyberattacks are an ever-present threat. It's essential to have a robust remediation plan to ensure...