References

Type
Url
Description

technique

https://technet.microsoft.com/library/ee617241.aspx

Microsoft. (n.d.). Active Directory Cmdlets - Get-ADUser. Retrieved November 30, 2017.


technique

https://msdn.microsoft.com/library/windows/desktop/aa379571.aspx

Microsoft. (n.d.). Security Identifiers. Retrieved November 30, 2017.


technique

https://msdn.microsoft.com/library/ms679833.aspx

Microsoft. (n.d.). Active Directory Schema - SID-History attribute. Retrieved November 30, 2017.


technique

https://support.microsoft.com/help/243330/well-known-security-identifiers-in-windows-operating-syste

Microsoft. (2017, June 23). Well-known security identifiers in Windows operating systems. Retrieved November 30, 2017.


technique

https://attack.mitre.org/techniques/T1178


technique

https://support.office.com/en-us/article/introduction-to-outlook-data-files-pst-and-ost-222eaf92-a99

Microsoft. (n.d.). Introduction to Outlook Data Files (.pst and .ost). Retrieved February 19, 2020.


technique

https://practical365.com/clients/office-365-proplus/outlook-cached-mode-ost-file-sizes/

N. O'Bryan. (2018, May 30). Managing Outlook Cached Mode and OST File Sizes. Retrieved February 19, 2020.


technique

https://attack.mitre.org/techniques/T1114/001


technique

http://www.slideshare.net/StephanBorosh/external-to-da-the-os-x-way

Alex Rymdeko-Harvey, Steve Borosh. (2016, May 14). External to DA, the OS X Way. Retrieved July 3, 2017.


technique

https://en.wikipedia.org/wiki/Keychain_(software)

Wikipedia. (n.d.). Keychain (software). Retrieved July 5, 2017.