![]() ![]() In this paper, we have identified the structure of Jump Lists in Windows 10 and compared it with Windows 7/8. There is no literature published on the structure of Jump Lists in Windows 10 and the tools that can successfully parse the Jump Lists in Windows 7/8, do not work properly for Windows 10. ![]() However, this feature has more capabilities to reveal evidence in Windows 10, due to its modified structure. The structure and artifacts recorded by Jump Lists have been widely discussed in various forensic communities since its debut in Microsoft Windows 7. The records maintained by Jump Lists have the potential to provide a rich source of evidence about users’ historic activity to the forensic investigator.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |