From ForensicsWiki
Revision as of 14:58, 21 April 2006 by Uwe Hermann (Talk | contribs)

Jump to: navigation, search

Windows is a widely-spread operating system from Microsoft.



FAT, NTFS, ...


The Windows Registry is a database of keys and values that provides a wealth of information to forensic investigators.

Thumbs.db Files

Thumbs.db files can be found on many Windows systems. They contain thumbnails of images or documents and can be of great value for the investigator.

Browser Cache

Browser History

External Links