Nowadays, perpetrators of the crimes are more forensic-aware than ever and take
preventive measures to limit or delete the program execution artifacts. Also, analysts are …

The construction of user activity timeline related to digital incident being investigated is part
of most of the forensic investigations. Sometimes, it is desirable to know the programs …

Criminals use computers and software to perform their crimes or to cover their misconducts.
Main memory or RAM encompasses vibrant information about a system including its active …

Digital investigators often get involved with cases, which seemingly point the responsibility
to the person to which the computer belongs, but after a thorough examination malware is …

The Amcache. hve is a registry hive file that is created by Microsoft® Windows® to store the
information related to execution of programs. This paper highlights the evidential potential of …

The field of digital forensic analysis has emerged in the past two decades to counter the
digital crimes and investigate the modus operandi of the culprits to secure the computer …

Nowadays, the security of all systems connected to the public network is severely tested.
Most users try to protect themselves against many abusive practices by using many security …

Operating System Forensics is the first book to cover all three critical operating systems for
digital forensic investigations in one comprehensive reference. Users will learn how to …

With the release of Microsoft's latest operating system, Windows 10, forensic investigators
must examine it in order to determine the changes implemented from Windows 8.1 and the …

Abstract Increasingly, Cyber–physical Systems are expected to operate in different
environments and interconnect with a diverse set of systems, equipment, and networks. This …