… manually turned off prefetching in Windows Registry or sometimes … An example below is
showing how artifacts can be combined … With all collected information examiner can confirm the …

… [11] collected the internet usage related registry values and … based on the collection and
filtration of registry values in the … Windows Registry as a forensic artefact: Illustrating evidence …

… areas, the integrity of the data artifacts that can be provided by … ) forensic framework (comprising
the acquisition/collection, … the forensic expression of the investigation and also illustrate …

… Due to the data breaches which can occur by cloud-based applications, this … on gathering
evidence from Windows 11 operating systems to discover and collect left over registry artifacts …

… focuses on collecting evidence from Windows 11 operating … the registry artefacts collected
and retrieved during a forensic … to obtain the data in the Windows 11 registry. The purpose of …

… Figure 2 illustrates the difference between ForensicAF and … for the registry hive containing
the registry key in the artifacts … against a well-known file collection to which the files seen as …

… The Windows registry in several “Hives” is among the valuable forensic artifacts considered
… Autopsy is an Open Source tool, which allows users to collect and analyze evidence data on …

… obtain forensic artifacts that can be used in forensic investigations. … used to extract forensic
evidence and collect information about … time between memory forensic tools showing in Fig .3 …

… and live forensics to identify Evernote artifacts on Windows 10 … collection of forensic images
of the snapshot for use in dead … It illustrates the feasibility of retrieving deleted Evernote files …

… The collection and examination of non-oral evidence is often … data and can be explained
by showing a chain of evidence … type - which includes File, Windows Registry, SMS Message …