| Widows 7环境下电子取证特点分析 |
| |
| 引用本文： | 孙奕. Widows 7环境下电子取证特点分析[J]. 信息网络安全, 2010, 0(11): 43-45. DOI: 10.3969/j.issn.1671-1122.2010.11.014 |
| |
| 作者姓名： | 孙奕 |
| |
| 作者单位： | 厦门市美亚柏科信息股份有限公司,福建厦门361008 |
| |
| 摘 要： | 随着微软新一代操作系统Windows7的普及,计算机取证调查人员将在实际工作中越来越多的遇到Windows7操作系统,本文介绍了Windows7环境下调查人员需要了解的取证特点以及对取证的影响进行简要的介绍和分析。
|
| 关 键 词： | Windows7 取证 Bitlocker exFAT 文件系统 回收站 虚拟文件夹 虚拟注册表 便笺 Superfetch |
Computer Forensic on Windows 7 |
| |
| Sun Yi. Computer Forensic on Windows 7[J]. Netinfo Security, 2010, 0(11): 43-45. DOI: 10.3969/j.issn.1671-1122.2010.11.014 |
| |
| Authors: | Sun Yi |
| |
| Affiliation: | Sun Yi( Xiamen Meiya Pico Informaion Co.,Ltd., Xiamen, Fujian 361008, China ) |
| |
| Abstract: | Windows 7, a landmark product of Microsoft, is becoming popular nowadays, computer forensic examiners now facing a large number of computers which have Windows 7 operating system. This article introduces new features of Windows 7, and what these new feature effect on computer forensic examination. |
| |
| Keywords: | Windows 7 Computer Forensic Bitlocker exFAT File System Recycle Bin Virtual Folder Virtual Registry Sticky Notes Superfetch |
| 本文献已被 维普 万方数据 等数据库收录！ |
