Create dataset-samples.md

Author: ngvuthdanhh

extras/dataset-samples.md

@@ -0,0 +1,19 @@
+# Dataset Samples for DFIR Practice
+
+This section provides example datasets useful for DFIR exercises.
+
+## Included Samples
+- Windows event log exports  
+- Sample PCAP files  
+- Memory dumps (sanitized)  
+- Prefetch and ShimCache datasets  
+- MFT & USN Journal samples  
+
+## Usage
+These datasets are intended for:
+- Timeline reconstruction  
+- Log correlation  
+- Malware behavior analysis  
+- Network investigation practice  
+
+**Note:** No real user data is included; all examples are anonymized.