The Windows Registry as a forensic resource

被引:44
作者
Carvey, H
机构
关键词
Windows; Registry; investigation; forensics; analysis;
D O I
10.1016/j.diin.2005.07.003
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The Windows Registry contains a wealth of information that can prove to be very valuable to the forensic investigator. The key to accessing this information is to know where the information exists within not only the file system, but also within the structure of the Registry itself. (c) 2005 Elsevier Ltd. All rights reserved.
引用
收藏
页码:201 / 205
页数:5
相关论文
empty
未找到相关数据