2013 Annual ADFSL Conference on Digital Forensics, Security and Law Proceedings Jun 11th, 2:30 PM Journey into Windows 8 Recovery Artifacts W. K. Johnson KPMG, USA,
[email protected] Follow this and additional works at: https://commons.erau.edu/adfsl Part of the Computer Engineering Commons, Computer Law Commons, Electrical and Computer Engineering Commons, Forensic Science and Technology Commons, and the Information Security Commons Scholarly Commons Citation Johnson, W. K., "Journey into Windows 8 Recovery Artifacts" (2013). Annual ADFSL Conference on Digital Forensics, Security and Law. 3. https://commons.erau.edu/adfsl/2013/tuesday/3 This Peer Reviewed Paper is brought to you for free and open access by the Conferences at Scholarly Commons. It has been accepted for inclusion in Annual ADFSL Conference on Digital Forensics, Security and Law by an (c)ADFSL authorized administrator of Scholarly Commons. For more information, please contact
[email protected]. ADFSL Conference on Digital Forensics, Security and Law, 2013 JOURNEY INTO WINDOWS 8 RECOVERY ARTIFACTS W. Kenneth Johnson KPMG USA
[email protected] ABSTRACT One of the most difficult processes of digital forensics is to understand how new technology interacts with current technology and how digital forensic analysts can utilize current Digital Forensics technologies and processes to recover and find information hidden. Microsoft has released their new operating system Windows 8, with this new release Microsoft has added some features to the operating system that will present some interesting complications to digital forensics. Since the initial release of the Windows 8 Release Candidates there have been some research released that focus primarily on the new user created artifacts and a few artifacts that have been added by the operating system that might contain valuable information.