Title
Program execution analysis in Windows: A study of data sources, their format and comparison of forensic capability.
Abstract
•Program execution analysis is often desirable in digital investigations to know the programs executed on the system and their execution history.•This research focuses on the evidential potential of eleven program execution artifacts.•The comparison of evidence scrubbing capabilities of five popular privacy cleaner tools is presented.•Forensic significance of examining considered program execution artifacts is also highlighted in this study.
Year
DOI
Venue
2018
10.1016/j.cose.2018.01.006
Computers & Security
Keywords
Field
DocType
Windows 10,Windows forensics,Program execution artifacts,Program execution analysis,Registry forensics
Ransomware,Computer science,Computer security,Instruction prefetch,Malware,Portable application,Executable
Journal
Volume
Issue
ISSN
74
C
0167-4048
Citations 
PageRank 
References 
1
0.41
11
Authors
2
Name
Order
Citations
PageRank
Bhupendra Singh162.09
Upasna Singh2104.90