## Lab 4: Defeating Anti-forensics Techniques
<!-- th -->
!th[c](lab4_lab.png)

1. `75`
2. `52b29a36da797ff3c4c9fed18140176b`
3. `To be Removed (NTFS)`
4. `Detailed (Scan progress and found objects. Slower.)`
5. `Admin:1001:A51FF92044FF4D13E52680FD0791DD5E:0861202B9BD0F6E918ACA597EAE28281 : : :`
6. `By2`
7. `103431`
8. `Microsoft.PowerShell.Core\FileSystem::C:\Windows\system32`
9. `application/x-msoffice`
10. `UPX1`