Notes On Vista Forensics, Part One

by Jamie Morris
Sept. 25, 2017 1 comment Symantec Apps & Hardening forensics vista

At the time of writing, Vista is a very new product for almost all businesses and consumers and its features lie waiting to be fully discovered. In fact, the impact of Vista will not be determined solely through its technological offerings but also by the way in which it shapes users' patterns of behaviour. This article, the first in a two-part series, takes a high level look at what we know now about those changes in Vista which seem likely to have the most impact on computer forensic investigations, starting with the built-in encryption, backup, and system protection features. Next time, part two will continue the discussion with a concentration on typical user activities such as web browser and e-mail usage. Before looking at the encryption and backup changes in Vista, let's take a quick look at the various flavours of Vista which are available...

2flash 7 months, 3 weeks ago

It's a pretty interesting experience reading such texts on Vista Forensics. It can easily be applied to a lot of stuff today too...