کد مقاله کد نشریه سال انتشار مقاله انگلیسی نسخه تمام متن
456506 695726 2008 15 صفحه PDF دانلود رایگان
عنوان انگلیسی مقاله ISI
Windows Vista and digital investigations
موضوعات مرتبط
مهندسی و علوم پایه مهندسی کامپیوتر شبکه های کامپیوتری و ارتباطات
پیش نمایش صفحه اول مقاله
Windows Vista and digital investigations
چکیده انگلیسی

Several of the new features of Windows Vista may create challenges for digital investigators. However, some also provide opportunities and create interesting new evidential artefacts which can be recovered and analysed. This paper examines several of these new features and describes methods for recovering shadow copies of files from Restore Points, identifying BitLocker on a system, the importance of recovery keys in dealing with BitLocker encrypted volumes and also the problems that User Account Control could cause for live investigations.

ناشر
Database: Elsevier - ScienceDirect (ساینس دایرکت)
Journal: Digital Investigation - Volume 5, Issues 1–2, September 2008, Pages 34–48
نویسندگان
, , ,