Practical Cyber Forensics: An Incident-Based Approach to Forensic Investigations

© Niranjan Reddy 2019

Niranjan ReddyPractical Cyber Forensicshttps://doi.org/10.1007/978-1-4842-4460-9_2

2. Windows Forensics

Niranjan Reddy¹ 

(1)

Pune, Maharashtra, India

 

Microsoft Windows still remains the most popular operating system for most computers. Most of the cyber forensic software are developed for Windows systems and its compatible hardware. There are numerous books, guides, and articles on Windows forensics that publish information about tools and techniques used in the industry. Windows Forensics as a field of research has tremendous potential, as we witness the development of new methods and tools for investigations.

Digital Evidence in Windows

As we saw in Chapter 1, digital evidence is any hardware, software, or electronic entity that ...