Forgotten But Not Gone: Gathering NTFS Artifacts of Deletion – SANS Tactical Detection Summit 2018 - eduVyne - Providing Certification Training Services Globally