70-77
Special Aspects of Digital Artifacts Forensic Analysis in Microsoft Windows 10 Operation System
Authors: Yuri V. Naidenyshev, Oleg V. Skulkin
Number of views: 601
In this article we will discuss both new sources of digital evidence, typical for the new version of operation system, such as Notification Center, Microsoft Edge web-browser and digital personal assistant Cortana, and some known artifacts, which changed its format, for example, Prefetch files. Also we’ll discuss such important source of digital evidence, as Volume Shadow Copy, which first appeared in Microsoft Windows XP, but still available in the new version of Microsoft Windows OS.