technique
https://technet.microsoft.com/library/ee617241.aspx
Microsoft. (n.d.). Active Directory Cmdlets - Get-ADUser. Retrieved November 30, 2017.
technique
https://msdn.microsoft.com/library/windows/desktop/aa379571.aspx
Microsoft. (n.d.). Security Identifiers. Retrieved November 30, 2017.
technique
https://msdn.microsoft.com/library/ms679833.aspx
Microsoft. (n.d.). Active Directory Schema - SID-History attribute. Retrieved November 30, 2017.
technique
https://support.microsoft.com/help/243330/well-known-security-identifiers-in-windows-operating-syste
Microsoft. (2017, June 23). Well-known security identifiers in Windows operating systems. Retrieved November 30, 2017.
technique
https://attack.mitre.org/techniques/T1178
technique
https://support.office.com/en-us/article/introduction-to-outlook-data-files-pst-and-ost-222eaf92-a99
Microsoft. (n.d.). Introduction to Outlook Data Files (.pst and .ost). Retrieved February 19, 2020.
technique
https://practical365.com/clients/office-365-proplus/outlook-cached-mode-ost-file-sizes/
N. O'Bryan. (2018, May 30). Managing Outlook Cached Mode and OST File Sizes. Retrieved February 19, 2020.
technique
https://attack.mitre.org/techniques/T1114/001
technique
http://www.slideshare.net/StephanBorosh/external-to-da-the-os-x-way
Alex Rymdeko-Harvey, Steve Borosh. (2016, May 14). External to DA, the OS X Way. Retrieved July 3, 2017.
technique
https://en.wikipedia.org/wiki/Keychain_(software)
Wikipedia. (n.d.). Keychain (software). Retrieved July 5, 2017.