PaulDotCom mailing list archives

Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class)

From: dphull at trustedsignal.com (Dave Hull)
Date: Fri, 14 Aug 2009 12:57:45 -0500

The user assist keys are ROT13 encoded!

There's just so much good stuff. Volume shadow copies and restore
points too. And the list goes on...

Current thread:

Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Adrian Crenshaw (Aug 13)
- Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) iamnowonmai (Aug 13)
  - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Adrian Crenshaw (Aug 14)
    - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Ken Pryor (Aug 14)
- Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Dave Hull (Aug 14)
  - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Dimitrios Kapsalis (Aug 14)
    - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Carlos Perez (Aug 14)
    - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Carlos Perez (Aug 14)
    - Forensically interesting spots in the Windows 7, Vista and XP file system and registry (prep work for my anti-forensics class) Dimitrios Kapsalis (Aug 14)