Back in December I took my first forensics course: SANS FOR508. Low and behold the following week I would use those skills to perform forensics analysis on an old Solarwinds server not in use (but still impacted by the infected update). Fast forward to now and I passed the...