Windows Registry in Forensic Analysis: A Literature Review

Autoři

  • Sangita M. Tabarno Department of CSE, MATS School of Engg. & IT, MATS University, Aarang, Raipur(CG)
  • Ashish K. Sharma Assistant Professor, Department of Computer Technology, M.I.E.T., Gondia(MS)
  • Nilmani Verma HOD, Department of CSE, School of Engg. & IT, MATS University, Aarang, Raipur(CG)

Klíčová slova:

digital forensics, windows operating systems, windows registry, forensic analysis

Abstrakt

Digital forensics is the buzzword in the present era of “the Information Age.” It deals with the acquisition, preservation, and analysis of digital evidences. The digital forensic field is very vast. It includes operating system forensics, network forensics, web forensics, client side forensics and server side forensics, etc. A pool of operating systems is available but the Windows environment is ubiquitous in many organizations. Windows operating systems store vast data in registry. The Windows registry is the heart and soul of Windows operating systems. It is a powerful and excellent source for extracting evidences which can strongly assist in forensic analysis. Albeit a lot of work has been done in this area but still it acts as a fertile area for new researchers. Moreover, there is a dearth of suitable and well-organized literature material so as to assist the researchers and practitioners in this area. Thus, this paper aims to create a data bank to facilitate the referencing needs of researchers and practitioners in this area. To this end, this paper presents the literature review pertaining to this topic. The literature review is based on the data collected from various research papers, tools and web sources that will strongly assist in easy referencing.

Biografie autora

  • Sangita M. Tabarno, Department of CSE, MATS School of Engg. & IT, MATS University, Aarang, Raipur(CG)
    Sangita A. Sharma B.E is currently working as an Assistant Professor in Manoharbhai Patel Institute of Engineering & Technology (MIET), Gondia, India. She has an experience of more than 13 years in academic field. She has published number of papers and articles nationally in various conferences and journals. Her areas of interest are Operating Systems, Windows Forensics, C and Data Structures,Databases, Web Technologies, Software Development, etc.
  • Ashish K. Sharma, Assistant Professor, Department of Computer Technology, M.I.E.T., Gondia(MS)
    Ashish K. Sharma (B.E, M.E) is currently working as an Assistant Professor in Manoharbhai Patel Institute of Engineering & Technology (MIET), Gondia, India. Prior to this, he was associated with IT industry in the areas of Training, Software and Web Application Development. He has an experience of more than 16 years in academic, industrial and software development field. He is a Microsoft Certified Professional (MCP) and also holds Brainbench certification. He has more than 12 research papers and articles published nationally and internationally in various reputed journals and conferences to his credit which includes Inderscience and Actapress Journals. His thrust areas include Software Development, Databases, Web Technologies, Software Engineering, Information Technology, Fuzzy Logic, Windows Forensics etc.

Stažení

Publikováno

2013-08-09

Číslo

Vol 4 No 2 (2013)

Sekce

Review Articles

Licence

Declaration and Copyright Transfer Form

(to be completed by authors)

 

I/ We, the undersigned author(s) of the submitted manuscript, hereby declare, that the above manuscript which is submitted for publication in the STM Journals(s), is not published already in part or whole (except in the form of abstract) in any journal or magazine for private or public circulation, and, is not under consideration of publication elsewhere.

·         I/We will not withdraw the manuscript after 1 week of submission as I have read the Author Guidelines and will adhere to the guidelines.

·         I/We Author(s ) have niether given nor will give this manuscript elsewhere for publishing after submitting in STM Journal(s).

·         I/ We have read the original version of the manuscript and am/ are responsible for the thought contents embodied in it. The work dealt in the manuscript is my/ our own, and my/ our individual contribution to this work is significant enough to qualify for authorship.

·          I/We also agree to the authorship of the article in the following order:

Author’s name                                    

 

1. ________________

2. ________________

3. ________________

4. _______________

 

We  Author(s) tick this box and would request you to consider it as our signature as we agree to the terms of this Copyright Notice, which will apply to this submission if and when it is published by this journal.