https://henking.pages.dev/posts/computer-forensics-operating-system-forensics-updated-2019-1290278/