Do you like free stuff?  Even better, how about something that might make your job easier?  If so, download the Windows 8 Forensic Guide.  It contains information on the Windows 8 user interface, Local and Roaming folder artifacts, the Communications App, and a variety of Registry locations.  Unless otherwise noted, this is also useful for Windows 7 and Vista.  The Windows 8 Forensic Guide has plenty of screen shots and hyperlinks to quickly get you where you need to be within the guide, so check it out!

Posted by on April 18, 2012 in Windows 8 Forensic Guide and tagged , , , , , , , , , , .

8 Comments

About propellerhead23

I have been in the computer forensics field for about five years. I got my start while serving in the Army on active duty and used what I learned while deployed to Iraq. I currently hold the EnCE and ACE certifications and I am also a member of a couple of forensic professional organizations. I am working in the field and also pursuing a graduate degree in computer forensics. I enjoy what I do - mostly because there's always something to learn and would be thrilled if what I've learned could be of use to someone within the community.

8 Responses »

  1. Digital Forensic Case Leads Getting caught via metadata, A Forensic Guide to Windows 8 and the New DFIR Wall Poster. says:
    May 4, 2012 at 13:43

    [...] Over at Propeller head forensic blog you can download a Windows 8 forensic guide [...]

    Reply
  2. Publications, études, rapports 2012 S18 | La Mare du Gof says:
    May 7, 2012 at 07:52

    [...] folder artifacts, the Communications App, and a variety of Registry locations (…).» Source : propellerheadforensics.com/2012/04/18/download-windows-8-forensic-guide/ Billets en relation : 22/04/2012. Windows 8 Forensic Guide [pdf] : [...]

    Reply
  3. Adrian Santangelo says:
    May 16, 2012 at 02:09

    Great stuff, thanks for your work and sharing!

    Reply
  4. Thuy Truc To says:
    May 24, 2012 at 11:25

    Amanda, thank you so much for putting up your Windows 8 research! I haven’t played with Windows 8 very much and this is really a great guide for me. Thanks again and looking forward to reading more of your work!

    Reply
  5. Yogesh Khatri says:
    August 28, 2012 at 14:15

    Great stuff. Just chanced upon this as I was searching for more information on a GUID. Keep it up..

    Reply

Do you haves something to say?

Fill in your details below or click an icon to log in:

Gravatar
WordPress.com Logo

You are commenting using your WordPress.com account. ( Log Out / Change )

Twitter picture

You are commenting using your Twitter account. ( Log Out / Change )

Facebook photo

You are commenting using your Facebook account. ( Log Out / Change )

Cancel

Connecting to %s