Forensic Analysis of Windows Shellbags

While shellbags have been available since Windows XP, they have only recently become a popular artifact as examiners are beginning to realize their potential value to an investigation. In a nutshell, shellbags help track views, sizes and positions of a folder window when viewed through Windows Explorer; this includes network folders and removable devices.

Find out how Shellbags could be important to your digital forensic investigations…

Read More (Magnet Forensics)

Leave a Comment