Tag Archives: Windows 8

project recall

Project Recall: Windows 8 and 10 Forensics – Spring 2015

The Project Recall series will revisit successful and productive projects in the LCDI’s past. Windows 8 and 10 The mission of this project is to discover differences in the artifact locations of Windows 8 and Windows 10. It will also be within the scope of this project to find and discover new artifacts that are […]

Continue reading

Windows 8 Internet Explorer History Timestamp

We recently received an email requesting that we elaborate on one of our past blogs about Internet Explorer with Windows 8. The problem was that events in Internet Explorer history were time stamped as happening an hour before the event is known to have occurred. We were asked why that happened. We suspected that daylight […]

Continue reading
Windows

Windows 8 Forensics: Part 3

Windows 8 Forensics Ethan Fleisher Senator Patrick Leahy Center for Digital Investigation File History Within the Windows 8 Operating system, they have introduced file history backup which changes the way that backups were previously used. In previous versions of windows, backups could only be maintained and restored using the default system. Within windows 8 this solution is […]

Continue reading
Windows 8

Windows 8 Forensics Part 2

Windows 8 Forensics Ethan Fleisher Senator Patrick Leahy Center for Digital Investigation Internet History Google Chrome History – Google Chrome History is stored within <root>users<username>appdatalocalgooglechromeuser datadefault.  After exporting this information out, I loaded it into a tool called Chrome Analysis Plus.  The following image depicts the information that I was able to obtain from Google […]

Continue reading

Windows 8 Forensics

Windows 8 Forensics Ethan Fleisher Senator Patrick Leahy Center for Digital Investigation Overview Today I am starting the preliminary research on the Windows 8 Operating System from a Digital Forensics standpoint. I will be comparing it primarily to known information on the Windows 7 Operating System. There are going to be many items that I […]

Continue reading