Back to Search
Start Over
Modern windows hibernation file analysis
- Source :
- Digital Investigation. 20:16-22
- Publication Year :
- 2017
- Publisher :
- Elsevier BV, 2017.
-
Abstract
- This paper presents the first analysis of the new hibernation file format that is used in Windows versions 8, 8.1, and 10. We also discuss several changes in the hibernation and shutdown behavior of Windows that will have a direct impact on digital forensic practitioners who use hibernation files as sources of evidence.
- Subjects :
- Computer science
Digital forensics
Hibernation (computing)
020206 networking & telecommunications
020207 software engineering
02 engineering and technology
File format
computer.software_genre
Memory forensics
Computer Science Applications
Medical Laboratory Technology
0202 electrical engineering, electronic engineering, information engineering
Microsoft Windows
Operating system
Memory analysis
Law
computer
Subjects
Details
- ISSN :
- 17422876
- Volume :
- 20
- Database :
- OpenAIRE
- Journal :
- Digital Investigation
- Accession number :
- edsair.doi...........307360ce0edbd8d303a83255c78765e7
- Full Text :
- https://doi.org/10.1016/j.diin.2016.12.003