Skip to main content
EXTENDED SEARCH
Log in
Top
Published in:
Read chapter Read first chapter

2024 | OriginalPaper | Chapter

3. Computer Theory

Authors : Joakim Kävrestad, Marcus Birath, Nathan Clarke

Published in: Fundamentals of Digital Forensics

Publisher: Springer International Publishing

Log in

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

This chapter offers a thorough examination of key areas in computer forensics, starting with an overview of secondary storage media and the importance of accounting for all storage areas to potentially uncover hidden partitions. It delves into the NTFS file system, explaining how files are structured and how they can be recovered even after deletion. The discussion on user accounts in Windows 11 highlights the significance of Security Identifiers (SIDs) and their role in identifying users. Additionally, the chapter explores the Windows registry, detailing its hierarchical structure and the crucial information it stores about users, applications, and system settings. The inclusion of topics such as encryption, hashing, SQLite databases, and memory and paging provides a holistic understanding of the tools and techniques used in digital forensics, making this chapter an essential read for anyone seeking to enhance their expertise in the field.
AI Generated

This summary of the content was generated with the help of AI.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Business + Economics & Engineering + Technology"

Online-Abonnement

Springer Professional "Business + Economics & Engineering + Technology" gives you access to:

  • more than 102.000 books
  • more than 537 journals

from the following subject areas:

  • Automotive
  • Construction + Real Estate
  • Business IT + Informatics
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Mechanical Engineering + Materials
  • Insurance + Risk


Secure your knowledge advantage now!

inform now

Springer Professional "Engineering + Technology"

Online-Abonnement

Springer Professional "Engineering + Technology" gives you access to:

  • more than 67.000 books
  • more than 390 journals

from the following specialised fileds:

  • Automotive
  • Business IT + Informatics
  • Construction + Real Estate
  • Electrical Engineering + Electronics
  • Energy + Sustainability
  • Mechanical Engineering + Materials





 

Secure your knowledge advantage now!

inform now

Springer Professional "Business + Economics"

Online-Abonnement

Springer Professional "Business + Economics" gives you access to:

  • more than 67.000 books
  • more than 340 journals

from the following specialised fileds:

  • Construction + Real Estate
  • Business IT + Informatics
  • Finance + Banking
  • Management + Leadership
  • Marketing + Sales
  • Insurance + Risk



Secure your knowledge advantage now!

inform now
previous chapter Ethics and Privacy
next chapter Types of Forensic Evidence
Literature
This content is only visible if you are logged in and have the appropriate permissions.
Metadata
Title
Computer Theory
Authors
Joakim Kävrestad
Marcus Birath
Nathan Clarke
Copyright Year
2024
Book
Fundamentals of Digital Forensics

Print ISBN: 978-3-031-53648-9

Electronic ISBN: 978-3-031-53649-6

Copyright Year: 2024

DOI
https://doi.org/10.1007/978-3-031-53649-6_3

Premium Partner

    Image Credits