6
Windows Artifact Analysis
The world runs on the Microsoft Windows operating system, with Microsoft accounting for nearly 90 percent of the operating system market share (https://netmarketshare.com/). In my personal experience, I have examined far more Windows operating systems than any other operating system; macOS would be the next most common operating system, with Linux running a distant third. While you have to be prepared to analyze all operating systems, whichever is the most common within the realm you are working in is where you should focus your attention.
This chapter will provide you with an understanding of the Windows operating system and the artifacts you may find. There are entire books written about the Windows operating system; ...
Get Learn Computer Forensics - Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
