Looking for digital evidence in Windows

Abstract

Digital evidence investigation is concerned with techniques of acquisition and analysis of data pertaining to some event or activity. This paper presents an introduction of this subject and describes various technical aspects of digital evidence techniques relevant to the Windows operating system.