Find Important Business Apps & OS Artifacts for Your Digital Investigations
HERE’S OUR GUIDE TO FINDING IMPORTANT BUSINESS APPLICATIONS & OS ARTIFACTS FOR YOUR DIGITAL FORENSICS INVESTIGATIONS!
Sometimes when conducting digital forensics examinations, investigators can lose sight of the fact that they’re investigating the actions of a person, not a computer. Almost every event or action on a system is the result of a user either doing something (or not doing something) at a particular time to create that event. It’s important for an investigator to understand how events on a system correlate to the actions of a person in the real world – and that can be done by finding digital evidence from important business applications and OS artifacts commonly used today.
When investigated together, digital artifacts like Windows system artifacts, documents and emails can be used to understand a user’s activity on a system and gain insight into what they have done on a computer.
This guide discusses some important business applications & OS artifacts to search for in your digital forensics investigations, why they’re important, and what kinds of evidence these artifacts can provide.
“Sometimes when conducting digital forensics examinations, investigators can lose sight of the fact that they’re investigating the actions of a person, not a computer. Almost every event or action on a system is the result of a user either doing something (or not doing something) at a particular time to create that event. It’s important for an investigator to understand how events on a system correlate to the actions of a person in the real world – and that can be done by finding digital evidence from important business applications and OS artifacts commonly used today.”