Windows Forensics Cookbook

Introduction

We would all like our cases to be one hundred percent perfect all the time, but unfortunately things do go wrong sometimes. Whether its because of a technical fault with a product you're using, a mistake made by an investigator, a faulty dataset in the first place, or some kind of legislative issue encountered when a case goes to court, it is all too common to come up against obstacles in your investigations.

In this chapter, we highlight some of the most common things that can go wrong with popular forensic suites and how to fix them. We will then take a look at what you can do when processes fail, and when you come up against legislative or jurisdictional challenges.

Finally, we will provide you with a short guide to taking ...