This week I talk about SVCHOST; how it fits into the Windows operating system, and how to think about it from a DFIR point of view.