Windows Registry in Forensic Analysis: A Literature Review

Authors

  • Sangita M. Tabarno
  • Ashish K. Sharma
  • Nilmani Verma

Abstract

Abstract
Digital forensics is the buzzword in the present era of “the Information Age.” It deals with the acquisition, preservation, and analysis of digital evidences. The digital forensic field is very vast. It includes operating system forensics, network forensics, web forensics, client side forensics and server side forensics, etc. A pool of operating systems is available but the Windows environment is ubiquitous in many organizations. Windows operating systems store vast data in registry. The Windows registry is the heart and soul of Windows operating systems. It is a powerful and excellent source for extracting evidences which can strongly assist in forensic analysis. Albeit a lot of work has been done in this area but still it acts as a fertile area for new researchers. Moreover, there is a dearth of suitable and well-organized literature material so as to assist the researchers and practitioners in this area. Thus, this paper aims to create a data bank to facilitate the referencing needs of researchers and practitioners in this area. To this end, this paper presents the literature review pertaining to this topic. The literature review is based on the data collected from various research papers, tools and web sources that will strongly assist in easy referencing.

Keywords: digital forensics, windows operating systems, windows registry, forensic analysis

Downloads

Published

2019-07-09

Issue

Vol. 4 No. 2 (2013)

Section

Articles

License

Declaration and Copyright Transfer Form

(to be completed by authors)

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

  • I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.
  • I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).
  • I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.
  •  I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. ________________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.