{"podcast":{"title":"CyberCode Academy","slug":"cybercode-academy-7578615","podcast_index_feed_id":7578615,"rss_url":"https://www.spreaker.com/show/6790974/episodes/feed","website_url":"https://www.spreaker.com/podcast/cybercode-academy--6790974","image_url":"https://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/5f51ccc7b22fdba95149ffa6346f1533.jpg","author":"CyberCode Academy","episode_count":297,"summary":"Welcome to CyberCode Academy — your audio classroom for Programming and Cybersecurity. 🎧 Each course is divided into a series of short, focused episodes that take you from beginner to advanced level — one lesson at a time. From Python and web development to ethical hacking and digital defense, our content transforms complex concepts into simple, engaging audio learning. Study anywhere, anytime — and level up your skills with CyberCode Academy. 🚀 Learn. Code. Secure. You can listen and download our episodes for free on more than 10 different platforms: https://linktr.ee/cybercode_academy","last_synced_at":"2026-07-13T14:17:20.596630+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615"},"episode":{"title":"Course 36 - Windows Forensics and Tools | Episode 12: A Forensic Guide to Windows User Artifacts","slug":"course-36-windows-forensics-and-tools-episode-12-a-forensic-guide-to-windows-user-artifacts","published_at":"2026-06-10T06:00:02+00:00","page_url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-36-windows-forensics-and-tools-episode-12-a-forensic-guide-to-windows-user-artifacts","show_page_url":"https://stenobird.com/podcast/cybercode-academy-7578615","url":"https://www.spreaker.com/episode/course-36-windows-forensics-and-tools-episode-12-a-forensic-guide-to-windows-user-artifacts--72013788","audio_url":"https://dts.podtrac.com/redirect.mp3/api.spreaker.com/download/episode/72013788/windows_artifacts_record_your_every_move.mp3","summary":"In this lesson, you’ll learn about: Windows user artifacts and forensic activity tracking1. What Are Windows User Artifacts? System-generated traces of user behavior Created automatically by Windows and applications 🔹 Key Idea Even if a user deletes files, system artifacts often remain 2. Evolution of User Profiles🔹 Older vs Modern Windows Windows XP: Documents and Settings Windows 7 / 10 / 11: C:\\Users 🔹 Why it changed Improved structure Better separation of user data Easier forensic navigation 3. NTUSER.DAT (Core User Hive)🔹 What it is Main registry file for user-specific settings 🔹 What it reveals Last login activity User preferences Recently used programs 👉 Key Insight: It is the digital identity record of a Windows user 4. AppData Folder🔹 Location Stored inside user profile directory 🔹 What it contains Application settings Cached data Local program databases Address books and configurations 👉 Key Insight: Applications silently store deep behavioral data here 5. Cookies and Web Tracking🔹 What cookies reveal Login sessions Browsing behavior Website preferences 👉 Forensic value: Helps reconstruct web activity patterns 6. Recent Files (User Activity Tracking)🔹 “Recent” folder behavior Stores shortcuts (.lnk files) to opened files 🔹 What it tracks Files opened Execution paths Access timestamps 👉 Key Insight: Even if original file is deleted, shortcut evidence remains 7. Desktop, Favorites, and Start Menu🔹 Desktop Visible + hidden user activity area 🔹 Favorites Stored browsing shortcuts 🔹 Start Menu Application execution history 👉 Key Insight: These locations reflect user intent and behavior patterns 8. Send To Folder🔹 Purpose Provides quick file transfer options 🔹 Forensic value Shows interaction with: External drives Applications System tools 9. Junction Points🔹 What…","meta_description":"In this lesson, you’ll learn about: Windows user artifacts and forensic activity tracking1. What Are Windows User Artifacts? System-generated traces of us…","key_points":[],"chapters":[],"topics":[],"duration_seconds":1098,"processing_state":"not_requested","actions":[{"name":"request_transcript","method":"POST","url":"https://stenobird.com/v1/public/podcasts/cybercode-academy-7578615/episodes/course-36-windows-forensics-and-tools-episode-12-a-forensic-guide-to-windows-user-artifacts/transcription-requests","description":"Idempotently request low-priority transcript generation for this episode."},{"name":"read_markdown","method":"GET","url":"https://stenobird.com/podcast/cybercode-academy-7578615/course-36-windows-forensics-and-tools-episode-12-a-forensic-guide-to-windows-user-artifacts.md","description":"Read the agent-friendly Markdown representation of this episode resource."}]}}