Windows Search forensics
Analyzing the Windows (Desktop) Search Extensible Storage Engine database
by Joachim Metz
[email protected]
Summary
While some may curse Windows Vista for all its changes, for us forensic investigators it also introduced new interesting ‘features’. One is the integration of Windows