This guide discusses processes and tools for use in internal computer investigations. It introduces a multi-phase model that is based on well-accepted procedures in the computer investigation community. It also presents an applied scenario example of an internal investigation in an environment that includes MicrosoftÂ® WindowsÂ®â€“based computers. The investigation uses Windows Sysinternals tools (advanced utilities that can be used to examine Windowsâ€“based computers) as well commonly available Windows commands and tools.
What Can You Tell Us About Your Password? A Contextual Approach
Uncovering Windows Registry Data and the Latest Mac Artifacts
Towards a Working Definition and Classification for Automation in Digital Forensics
Important: No API Key Entered.
Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.