diff --git a/windows-forensics-investigation-notes.docx b/windows-forensics-investigation-notes.docx new file mode 100644 index 0000000..a299eb3 Binary files /dev/null and b/windows-forensics-investigation-notes.docx differ