registry Archives - Forensic Focus

Windows 8 Touch Keyboard Forensics

12th May 20204th September 2015

Microsoft released Windows 8 in 2012. With this new version, Microsoft made a fundamental shift in Windows 8 as compare to older versions of Windows. It does not only target netbooks, laptops and traditional computers, instead they decided to use

Windows 8: Important Considerations for Computer Forensics and Electronic Discovery

22nd February 20239th December 2012

Introduction Documents identified by computer forensic investigations in civil litigation typically require review and analysis by attorneys to determine if the uncovered evidence could support causes of action such as breach of contract, breach of fiduciary duty, misappropriation of trade

Timeline Analysis – A One Page Guide

12th May 202018th July 2011

First published February 2010 by Darren Quick Comments and suggestions may be sent to darren_q@hotmail.com Prepare The scope of the request determines the data to be collected, such as within a specific timeframe, and data of relevance such as specific

Apple Property List: Comparing the Mac OS X Property List to the Windows Registry

12th May 202016th July 2011

First published April 2009 Dennis Browning Champlain College Burlington, VT dennisbrowning@gmail.com Abstract This paper will introduce the Property Lists in the Apple OS X and compare them to the Microsoft Windows Registry. Also within this paper we will examine how

A Forensic Analysis Of The Windows Registry

12th May 202013th July 2011

First published November 2007 Derrick J. Farmer Champlain College Burlington, Vermont dfarmer03@gmail.com (click here for a revised, quick reference PDF version of this paper) AbstractThis paper will introduce the Microsoft Windows Registry database and explain how critically important a registry

Forensic Analysis of the Windows Registry

12th May 202010th July 2011

First published April 2006 Lih Wern Wong School of Computer and Information Science, Edith Cowan University lihwern@yahoo.com Abstract Windows registry contains lots of information that are of potential evidential value or helpful in aiding forensic examiners on other aspects of