D.rar | Erin
: Analysis of .lnk files in the Recent folder shows Erin accessed sensitive documents and external storage devices.
: Registry keys (like USBSTOR ) reveal that a specific Kingston USB drive was plugged into the machine shortly before the "data leak" occurred. Erin D.rar
: These artifacts confirm that Erin executed specific programs, such as CCleaner or Eraser , to attempt to wipe evidence of her activity. : Analysis of









