Prefetch Files are created by the Windows OS when programs are executed, and can provide a wealth of information about what programs have ran. This 9.5 minute video gives great detail on how you can use this information in investigations. A longer more detailed version WITH ENSCRIPT is available for free under "EnCast" at www.encaseondemand.com.
Category:
Only registered members are allowed to watch videos
Computer forensics (or forensic computing) is the use of specialized techniques for recovery, authentication, and analysis of electronic data with a view to presenting evidence in a court of law.