cross-source forensic matching · drop CSVs from any tool · correlation by hash · path · IP · domain
drop CSV files
Drop 2–10 CSV files from any forensic tool
amcache · shimcache · browser history · DNS · PCAP exports · prefetch · any CSV
status
drop 2–10 CSV exports from any forensic tool — correlation happens instantly