diff --git a/Help/Disable_Security_Setting.pptx b/Help/Disable_Security_Setting.pptx
new file mode 100644
index 0000000..1497437
Binary files /dev/null and b/Help/Disable_Security_Setting.pptx differ
diff --git a/Help/Kali_Installation_2020.pptx b/Help/Kali_Installation_2020.pptx
new file mode 100644
index 0000000..1c7434f
Binary files /dev/null and b/Help/Kali_Installation_2020.pptx differ
diff --git a/Help/Wine_installation.pptx b/Help/Wine_installation.pptx
new file mode 100644
index 0000000..c03c4b3
Binary files /dev/null and b/Help/Wine_installation.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_0_Env_Setting.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_0_Env_Setting.pptx
new file mode 100644
index 0000000..3b2a37a
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_0_Env_Setting.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_10_Vol_Shadow_Copy_anti_forensics.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_10_Vol_Shadow_Copy_anti_forensics.pptx
new file mode 100644
index 0000000..6fa459a
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_10_Vol_Shadow_Copy_anti_forensics.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_11_CD-R_Data_Carving.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_11_CD-R_Data_Carving.pptx
new file mode 100644
index 0000000..d675ae1
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_11_CD-R_Data_Carving.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_12_Crack_Win10_Login_Password.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_12_Crack_Win10_Login_Password.pptx
new file mode 100644
index 0000000..ae53626
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_12_Crack_Win10_Login_Password.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_1_Registry.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_1_Registry.pptx
new file mode 100644
index 0000000..da61311
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_1_Registry.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_2._WinEvt_XML.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_2._WinEvt_XML.pptx
new file mode 100644
index 0000000..42bccad
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_2._WinEvt_XML.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_3_WebHistory_SQL.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_3_WebHistory_SQL.pptx
new file mode 100644
index 0000000..058bdde
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_3_WebHistory_SQL.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_4_Email_USB.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_4_Email_USB.pptx
new file mode 100644
index 0000000..312231c
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_4_Email_USB.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_5_USNJournaling.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_5_USNJournaling.pptx
new file mode 100644
index 0000000..07f56d9
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_5_USNJournaling.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_6_Network_Shellbag_Jumplist.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_6_Network_Shellbag_Jumplist.pptx
new file mode 100644
index 0000000..40be1a5
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_6_Network_Shellbag_Jumplist.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_7_NetworkDrive_ShellBag.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_7_NetworkDrive_ShellBag.pptx
new file mode 100644
index 0000000..1ba10af
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_7_NetworkDrive_ShellBag.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_8_CD_$MFT.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_8_CD_$MFT.pptx
new file mode 100644
index 0000000..cd0121f
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_8_CD_$MFT.pptx differ
diff --git a/NIST_Data_Leakage_Case/NIST_Data_Leakage_9_Win_searchDB_csvsql.pptx b/NIST_Data_Leakage_Case/NIST_Data_Leakage_9_Win_searchDB_csvsql.pptx
new file mode 100644
index 0000000..0ebfe45
Binary files /dev/null and b/NIST_Data_Leakage_Case/NIST_Data_Leakage_9_Win_searchDB_csvsql.pptx differ