Download Windows 8 Forensic Guide

Contents
Windows 8 User Interface ........................................................................ 3
Windows Artifacts ................................................................................. 15
Local Folder ............................................................................... 15
Metro Apps ................................................................................ 18
IE10 Websites Visited ................................................................. 19
Journal Notes ............................................................................. 20
Desktop Tools ............................................................................ 22
Metro App Web Cache ............................................................... 23
Metro App Cookies .................................................................... 24
Cache ......................................................................................... 29
Cookies ...................................................................................... 30
Microsoft Folder ......................................................................... 31
Digital Certificates ..................................................................... 31
What’s New ................................................................................ 33
User’s Contacts .......................................................................... 40
App Settings .............................................................................. 43
Windows Registry .................................................................................. 45
NTUSER.DAT ............................................................................. 46
SAM ........................................................................................... 49
SYSTEM ..................................................................................... 53
USB STORAGE DEVICES ........................................................... 58
SOFTWARE ................................................................................ 68
Final Thoughts ....................................................................................... 71
Index ...................................................................................................... 73