Microsoft released Windows 8 in 2012. With this new version, Microsoft made a fundamental shift in Windows 8 as compare to older versions of Windows. It does not only target netbooks, laptops and traditional computers, instead they decided to use … Read more
registry
Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
Introduction
Documents identified by computer forensic investigations in civil litigation typically require review and analysis by attorneys to determine if the uncovered evidence could support causes of action such as breach of contract, breach of fiduciary duty, misappropriation of trade … Read more
Timeline Analysis – A One Page Guide
First published February 2010
by Darren Quick
Comments and suggestions may be sent to [email protected]
Prepare
… Read more The scope of the request determines the data to be collected, such as within a specific timeframe, and data of relevance such as specific
Apple Property List: Comparing the Mac OS X Property List to the Windows Registry
First published April 2009
Dennis Browning
Champlain College
Burlington, VT
[email protected]
Abstract
… Read more This paper will introduce the Property Lists in the Apple OS X and compare them to the Microsoft Windows Registry. Also within this paper we will examine how
A Forensic Analysis Of The Windows Registry
First published November 2007
Derrick J. Farmer
Champlain College
Burlington, Vermont
[email protected]
(click here for a revised, quick reference PDF version of this paper)
AbstractThis paper will introduce the Microsoft Windows Registry database and explain how critically
… Read more Forensic Analysis of the Windows Registry
First published April 2006
Lih Wern Wong
School of Computer and Information Science, Edith Cowan University
[email protected]
Abstract
Windows registry contains lots of information that are of potential evidential value or helpful in aiding forensic examiners on other aspects of … Read more