Shadow Analyser speeds digital analysis of recovery files

Researchers at UK computer forensics firm Disklabs have helped develop technology that will drastically speed up the forensic analysis of ‘Volume Shadow Copies’ (VSC) of suspect Windows computers. The introduction of VSC technology in Windows 2003 created a huge headache for forensic investigators, who have struggled to find a viable method for extracting meaningful data from these files. The technology, since included in Windows Vista and Windows 7, allows system restores and the recovery of previous versions of files…

More (The Register)

Leave a Comment