Digital forensics laboratory projects
Journal of Computing Sciences in Colleges
On the persistence of deleted windows registry data structures
Proceedings of the 2009 ACM symposium on Applied Computing
Time based data forensic and cross-reference analysis
Proceedings of the 2011 ACM Symposium on Applied Computing
Forensic analysis of the Windows registry in memory
Digital Investigation: The International Journal of Digital Forensics & Incident Response
Recovering deleted data from the Windows registry
Digital Investigation: The International Journal of Digital Forensics & Incident Response
A survey of main memory acquisition and analysis techniques for the windows operating system
Digital Investigation: The International Journal of Digital Forensics & Incident Response
Analysis of Internet Download Manager for collection of digital forensic artefacts
Digital Investigation: The International Journal of Digital Forensics & Incident Response
The Windows Registry as a forensic artefact: Illustrating evidence collection for Internet usage
Digital Investigation: The International Journal of Digital Forensics & Incident Response
DIALOG: A framework for modeling, analysis and reuse of digital forensic knowledge
Digital Investigation: The International Journal of Digital Forensics & Incident Response
Computer forensic timeline visualization tool
Digital Investigation: The International Journal of Digital Forensics & Incident Response
| Hi-index | 0.00 |
The Windows Registry contains a wealth of information that can prove to be very valuable to the forensic investigator. The key to accessing this information is to know where the information exists within not only the file system, but also within the structure of the Registry itself.