ogmini - Exploration of DFIR

Having fun while learning about and pivoting into the world of DFIR.

---

About Blog Posts by Tags Research Talks/Presentations GitHub RSS

Research

Published

Date	Publication	Title	Link
12/21/2025	DFIR Review	Is that Windows Notepad window really empty?	https://dfir.pubpub.org/pub/wmhy8t6v/release/6

Blog

Links to pages on my research into various DFIR artifacts.

RDCMan

• https://ogmini.github.io/2025/05/06/Researching-RDCMan.html
• https://ogmini.github.io/2025/05/07/Researching-RDCMan-Part-2.html
• https://ogmini.github.io/2025/05/08/RDCMan-Kape-Target.html
• https://ogmini.github.io/2025/05/09/Researching-RDCMan-Part-3.html

Remote Desktop Manager

• https://ogmini.github.io/2025/05/19/Remote-Desktop-Manager-Artifacts.html
• https://ogmini.github.io/2025/05/20/Remote-Desktop-Manager-Artifacts-Part-2.html
• https://ogmini.github.io/2025/05/21/Remote-Desktop-Manager-Artifacts-Part-3.html
• https://ogmini.github.io/2025/05/22/Remote-Desktop-Manager-SQLECmd-Map-Part-1.html
• https://ogmini.github.io/2025/05/23/Remote-Desktop-Manager-Artifacts-Part-4.html
• https://ogmini.github.io/2025/05/24/Remote-Desktop-Manager-Artifacts-Part-5.html
• https://ogmini.github.io/2025/05/25/Remote-Desktop-Manager-Artifacts-Part-6.html

Notepad++

• https://ogmini.github.io/2025/02/08/Notepad++-Documenting-Digital-Artifacts.html
• https://ogmini.github.io/2025/02/09/Notepad++-Documenting-Digital-Artifacts-Part-2.html
• https://ogmini.github.io/2025/02/14/Windows-Notepad-vs-Notepad++.html

Visual Studio Code

• https://ogmini.github.io/2025/02/15/Investigating-Visual-Studio-Code.html
• https://ogmini.github.io/2025/02/16/Investigating-Visual-Studio-Code-Part-2.html
• https://ogmini.github.io/2025/02/22/Investigating-Visual-Studio-Code-Part-3.html

Windows Notepad

• https://github.com/ogmini/Notepad-State-Library
• https://ogmini.github.io/2025/03/08/Windows-Notepad-Rewrite.html
• https://ogmini.github.io/2025/03/14/Windows-Notepad-Rewrite-Part-2.html
• https://ogmini.github.io/2025/03/16/Windows-Notepad-Rewrite-Part-3.html
• https://ogmini.github.io/2025/03/18/Windows-Notepad-Rewrite-Part-4.html
• https://ogmini.github.io/2025/03/19/Windows-Notepad-Rewrite-Part-5.html
• https://ogmini.github.io/2025/04/23/Windows-Notepad-Version-Changes-(11.2402.22.0).html
• https://ogmini.github.io/2025/04/24/Windows-Notepad-Version-Changes-(11.2407.9.0).html
• https://ogmini.github.io/2025/04/25/Windows-Notepad-Version-Changes-(11.2408.12.0).html
• https://ogmini.github.io/2025/04/27/Windows-Notepad-Version-Changes-(11.2049.9.0).html
• https://ogmini.github.io/2025/06/10/Windows-Notepad-Recent-Files.html
• https://ogmini.github.io/2025/06/11/Windows-Notepad-Find-Replace-Bing.html
• https://ogmini.github.io/2025/06/12/Windows-Notepad-Revisiting-Application-Hive.html

OpenSSH on Debian

• https://ogmini.github.io/2025/03/21/David-Cowen-Sunday-Funday-SSH.html

OpenSSH on Windows 11

• https://ogmini.github.io/2025/03/25/David-Cowen-Sunday-Funday-SSH-Windows.html