Joe Sylve has announced his new article together with Vico Marziale and Golden Richard III entitled “Modern Windows Hibernation File Analysis”. This paper presents the first analysis of the new hibernation file format that is used in Windows versions 8, 8.1, and 10. Authors also discuss several changes in the hibernation and shutdown behavior of Windows that will have a direct impact on digital forensic practitioners who use hibernation files as sources of evidence.

The article will be available in the next issue of Digital Investigation journal, but draft is already available:

modern-windows-hibernation

 

Load More Related Articles
Load More In Articles

Leave a Reply

Your email address will not be published. Required fields are marked *