It's not very clear to me if the contents of the INFO2 file are backup up in Windows restore points. Sure, I've read that the following information is backed up
registry
local profiles
com+ dbase
windows file protection dll cache
wmi dbase
iis metabase
files with extensions listed in the <include> portion of the monitored file extensions list
but what about INFO2 ?
Stamitz
Why would it be? Restore points don't backup user data, and INFO2 is about deleted user data.
Here's a few sites that will help with understanding Restore Points.
http//
http//
http//128.175.24.251/forensics/restorepoints.htm
Thanks !
Stamitz
Restore Point stuff…probably more than you wanted…
http//