The Windows Forensic Journey — Rich Header

The “Rich Header” is an optional and undocumented structure in a PE executable…