This Is Why You Need MSAB in Your DFIR Lab