Obtain a sample disk image Use CDQR to process the disk image (multiple options) View data in the built in Kibana Dashboards View data in TimeSketch This is an example that requires a good amount of ...