© Nihad A. Hassan 2019
Nihad A. HassanDigital Forensics Basicshttps://doi.org/10.1007/978-1-4842-3838-7_7

7. Windows Forensics Analysis

Nihad A. Hassan1 
(1)
New York, New York, USA
 

Investigating Windows OS for forensics artifacts

In July 2018, the market share of the Windows operating system (desktop version) range stood at 82.88%.1 This means that the majority of personal computers worldwide run using this operating system (using its different versions) (see Figure 7-1). Obviously, a world running on Windows computers certainly means that most of our digital forensic work involves investigating this type of OS; knowing how to find your way using Windows is a must for any digital forensics practitioner.
Figure 7-1

Operating system market share (October ...

Get Digital Forensics Basics: A Practical Guide Using Windows OS now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.