Download Windows 8 Forensic Guide
Transcript
Contents Windows 8 User Interface ........................................................................ 3 Windows Artifacts ................................................................................. 15 Local Folder ............................................................................... 15 Metro Apps ................................................................................ 18 IE10 Websites Visited ................................................................. 19 Journal Notes ............................................................................. 20 Desktop Tools ............................................................................ 22 Metro App Web Cache ............................................................... 23 Metro App Cookies .................................................................... 24 Cache ......................................................................................... 29 Cookies ...................................................................................... 30 Microsoft Folder ......................................................................... 31 Digital Certificates ..................................................................... 31 What’s New ................................................................................ 33 User’s Contacts .......................................................................... 40 App Settings .............................................................................. 43 Windows Registry .................................................................................. 45 NTUSER.DAT ............................................................................. 46 SAM ........................................................................................... 49 SYSTEM ..................................................................................... 53 USB STORAGE DEVICES ........................................................... 58 SOFTWARE ................................................................................ 68 Final Thoughts ....................................................................................... 71 Index ...................................................................................................... 73