±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 36783
New Yesterday: 2 Visitors: 260

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

System restore forensics

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


System restore forensics

Post Posted: Feb 17, 20 17:47

Hie, can anyone kindly share the information regarding how to conduct forensics of a windows machine which restored the machine to latest restore point. Hurdles are....
1. No other previous resore point available in the system.
2. Volume shadow copies bring out no info
3. G
How to get the documents available on desktop before restore point.
Speedy answer is commendable.  

Page 1 of 1