Article ID | Journal | Published Year | Pages | File Type |
---|---|---|---|---|
458321 | Digital Investigation | 2006 | 8 Pages |
Abstract
In this paper we examine the use of the Windows Registry as a source of forensic evidence in digital investigations, especially related to Internet usage. We identify the sources of the information, along with the methods used and toolsets available for such examinations, and illustrate their use for recovering evidence. We highlight issues of the forensic practise related to Registry inspections and propose ideas for further improvements of the process and the tools involved.
Keywords
Related Topics
Physical Sciences and Engineering
Computer Science
Computer Networks and Communications
Authors
Vivienne Mee, Theodore Tryfonas, Iain Sutherland,