| Publisher | FriendsGlobal | ||
|---|---|---|---|
| Format | 411.6KB PDF | Date added | 02 Apr 2007 |
| Topics | Windows XP | ||
| Downloads | 22 | ||
In a forensic investigation, while collecting evidence, Anzaldua, Godwin, Volonino state the best practice is to unplug a computer or remove a laptop's battery, so as to preserve the exact contents of a disk without introducing artifacts, changes to the system, for later investigations. It is critical the original contents of a system, as found, are not altered. Using the operating system shut down alters log and temp file states; furthermore, a shutdown may trigger a logic bomb and a possible data wipe. This approach has a problem; it does not preserve active memory.
Did you find this white paper useful?
1 out of 3 users found this white paper useful
Related white papers
Migrating to Windows 7
Windows 7 represents a monumental improvement over past operating systems but also presents a number of challenges for those considering an upgrade. From determining if your environment is Windows...
What Windows 7 Means to You
Windows 7 is widely regarded as a make or break product for Microsoft after the less than satisfactory performance of Windows Vista. However, there are actually a lot of...
Windows 7 Commercial Adoption Outlook
The anticipation for commercial adoption of Windows 7 is reaching a boiling point. With Windows 7 available now, IT professionals should start preparing for it now. Specifically, they should: 1)...
Ten Things You Should Know about Windows 7 vs. Windows XP
So you're an XP shop, and your organization skipped Vista but is considering taking the plunge to the latest revision of the Longhorn platform: Windows 7. Windows 7 is a...
Windows 7 security: A great leap forward or business as usual?
The public release of Windows 7 is approaching fast. Debates and discussions have been raging on the security improvements in the new platform, and some potential problems have also emerged....
Dell Proconsult Windows 7 Readiness Assessment FAQ
Microsoft Windows 7 Readiness Assessment is a gap analysis of a customer's ability to migrate to Windows 7 in a given time frame. Your migration project is evaluated in terms...
Web Server Improvements with Microsoft Server 2008
This is another in our series about Microsoft Longhorn, also known as Server 2008. In this series we break down the most important components of Longhorn and give listeners the...
