Abstract
Unarguably, the skill of a forensic examiner comes down to the examiner’s ability to locate artifacts that can contribute to the answering of a question. Thus, the knowledge of where to find forensic artifacts is of course key. While this ability comes, to a large extent, from experience, a shortcut to that experience is reading about the experience of others. In this chapter, several key artifacts that are proven to be important in several cases that the author worked are presented. The chapter introduces where to find several artifacts of interest and how to correctly interpret them. The artifacts presented are very general and present on pretty much any Windows-based computer out there.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Arshad A, Iqbal W, Abbas H (2017) USB storage device forensics for Windows 10. J Forensic Sci 63:856–867
Magnet Forensics (2014) Forensic analysis of LNK files. Available online: https://www.magnetforensics.com/computer-forensics/forensic-analysis-of-lnk-files/. Fetched March 22, 2018
Mansurov N (2018) What is EXIF data? Available online: https://photographylife.com/what-is-exif-data. Fetched March 12, 2018
Nair R (2012) What is app launch prefetching and how does it help? Available online: https://social.technet.microsoft.com/wiki/contents/articles/13011.what-is-app-launch-prefetching-and-how-does-it-help.aspxaspx. Fetched March 13, 2018
TechNet (2018) Event viewer. Available online: https://technet.microsoft.com/en-us/library/cc938674.aspx. Fetched March 26, 2018
Author information
Authors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this chapter
Cite this chapter
Kävrestad, J. (2020). Notable Artifacts. In: Fundamentals of Digital Forensics. Springer, Cham. https://doi.org/10.1007/978-3-030-38954-3_4
Download citation
DOI: https://doi.org/10.1007/978-3-030-38954-3_4
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-38953-6
Online ISBN: 978-3-030-38954-3
eBook Packages: Computer ScienceComputer Science (R0)