Saturday, August 8, 2015

WINDOWS 10 FORENSICS



The following artifacts have changed since Windows 8.1
  • The Recycle bin
  • Thumbnails,
  • OneDrive
  • Prefetch files
The following artifacts are new artifacts that are features added in Windows 10 or have never been analyzed before:
  • Spartan Browser
  • Facebook App
The following artifacts have remained unchanged
  • Event logs
  • Internet Explorer
  • USB Activity
  • LNK Files
The following data is also detailed in the table below:
1

FURTHER WORK

Further work needs to be done on the following artifacts:
  • Notification center
  • Modern Office
  • Synced Data
  • Cortana Search history
  • Modern Mail App

We will Publish a Full Report of Windows 10 Artifacts Soon . 

0 comments: