O'Reilly logo

Digital Forensics with Open Source Tools by Harlan Carvey, Cory Altheide

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 4

Windows Systems and Artifacts

Information in this Chapter

Introduction

Like any operating system, Windows systems offer a wealth of artifacts. In the case of the Windows operating system, there may be a greater wealth of artifacts than on some other operating systems. As such, those artifacts are unique to the operating system. This chapter addresses and discusses a number of artifacts unique and specific to Windows systems.

Windows File Systems

Windows systems support two primary file systems: FAT and NTFS. “FAT” stands for “file allocation table,” and “NTFS” stands for “New Technology File System.” FAT file systems come in several ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required