Chapter 5
Windows System Artifacts
Information in This Chapter:
Finding Deleted Data
Hibernation Files
Examining the Windows Registry
Print Spooling Evidence
Recycle Bin Operation
Metadata: What It Is and How It's Used
Thumbnail Images as Evidence ...
Get The Basics of Digital Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
