Windows Prefetch Forensics – Windows & Computer Forensics Tutorial for Beginners
iSpeech
The importance of windows prefetch file system in cyber forensics is that it tell a lot about the softwares or programs run on the system, the path to that exe file, last time the software was used and how many times it was used. Imagine a case where the suspect has used a prohibited software on the system and later deleted that software. Then we can find out whether the suspect has used that particular program or not by analysing these prefetch files.
---------IF YOU LIKED THE VIDEO THEN DO SUBSCRIBE THE CHANNEL------------
2016-11-25 16:11:57
source
Gloss