Modern windows hibernation file analysis. (March 2017)
- Record Type:
- Journal Article
- Title:
- Modern windows hibernation file analysis. (March 2017)
- Main Title:
- Modern windows hibernation file analysis
- Authors:
- Sylve, Joe T.
Marziale, Vico
Richard, Golden G. - Abstract:
- Abstract: This paper presents the first analysis of the new hibernation file format that is used in Windows versions 8, 8.1, and 10. We also discuss several changes in the hibernation and shutdown behavior of Windows that will have a direct impact on digital forensic practitioners who use hibernation files as sources of evidence.
- Is Part Of:
- Digital investigation. Volume 20(2016)
- Journal:
- Digital investigation
- Issue:
- Volume 20(2016)
- Issue Display:
- Volume 20, Issue 2016 (2016)
- Year:
- 2016
- Volume:
- 20
- Issue:
- 2016
- Issue Sort Value:
- 2016-0020-2016-0000
- Page Start:
- 16
- Page End:
- 22
- Publication Date:
- 2017-03
- Subjects:
- Microsoft windows -- Memory analysis -- Memory forensics -- Hibernation file -- Digital forensics
Forensic sciences -- Data processing -- Periodicals
Criminal investigation -- Data processing -- Periodicals
363.250285 - Journal URLs:
- http://www.sciencedirect.com/science/journal/17422876 ↗
http://www.elsevier.com/journals ↗ - DOI:
- 10.1016/j.diin.2016.12.003 ↗
- Languages:
- English
- ISSNs:
- 1742-2876
- Deposit Type:
- Legaldeposit
- View Content:
- Available online (eLD content is only available in our Reading Rooms) ↗
- Physical Locations:
- British Library DSC - 3588.396620
British Library DSC - BLDSS-3PM
British Library STI - ELD Digital store - Ingest File:
- 166.xml