• What Are “Volume Shadow Copies”?
• Live Systems
• Acquired Images
Every time a new version of the Windows operating system is announced or made public, a collective shudder ripples throughout the forensics community. What new features are going to be available in the next operating system version? What’s going to remain the same? What new challenges will we face? Some changes are minor; for example, the binary structure of the Windows Registry hasn’t changed among versions, ...