| Article ID | Journal | Published Year | Pages | File Type |
|---|---|---|---|---|
| 4955646 | Digital Investigation | 2017 | 7 Pages |
Abstract
This paper presents the first analysis of the new hibernation file format that is used in Windows versions 8, 8.1, and 10. We also discuss several changes in the hibernation and shutdown behavior of Windows that will have a direct impact on digital forensic practitioners who use hibernation files as sources of evidence.
Related Topics
Physical Sciences and Engineering
Computer Science
Computer Networks and Communications
Authors
Joe T. Sylve, Vico Marziale, Golden G. III,