This week I talk about\xa0SRUM, a windows artifact with some significant forensic value for both File Use & Knowledge investigations as well as Incident Response.