https://digital-forensics.sans.org/blog/2010/12/17/digital-forensics-configure-windows-investigative-workstations/
SANS Digital Forensics and Incident Response Blog | Digital Forensics: How to configure Windows Investigative Workstations | SAN
17 Dec 2010 I like Windows. There... I said it. I understand that this statement will probably come with the requisite beatings, but I honestly enjoy using Windows on a day to day basis more than other operating systems and am willing to take whatever flac
digital-forensics.sans.org
Disable Autorun/Autoplay
Make USB devices read-only
Disable automount
Disable search indexing
Patching and verification