Advanced DFIR Wizard Master Class ADFIRWMC - 0. Disclaimers ADFIRWMC - 1. Windows Remote Administration for Incident Responders ADFIRWMC - 2. Remote Acquisition of Windows Artifacts ADFIRWMC - 3. Files of Forensic Interest ADFIRWMC - 4. The Value of Unstructured Analysis