Defender’s hidden flight recorder: decrypting mpenginedb.db | Protokol-7

https://protokol-7.github.io/dfir/2026/11/10/defenders-hidden-flight-recorder-mpenginedb.html