The steps to extract web browser data from Pagefile.sys are as follows:
- Start by creating a new case in Belkasoft Evidence Center - you already know how to do this. Then, add the pagefile.sys file you exported previously as the evidence source.
Figure 8.9. Adding pagefile.sys as the evidence source
- As we are planning to extract web browser artifacts and are dealing with a Windows system, let's choose corresponding data types, as in the following figure:
Figure 8.10. Choosing data types
- Click Finish and the processing will ...