ShellBag Forensics and User Folder Navigation Tracking

Hard GIAC GCFA cybersecurity drill: You are investigating an insider threat case where an attacker accessed highly sensitive directories before deleting