This week I\u2019m talking about SRUM, a Windows artifact that you don\u2019t hear that much about. It has a lot of great potential as evidence and it is something worth the time to check it out and see how it fits into your daily DFIR work.