Home Videos Shellbag Forensics

Shellbag Forensics

0
0
997

As a continuation of the “Introduction to Windows Forensics” series, this video by Richard Davis introduces Shellbags. Have you ever customized the folder view settings within any folder in Windows Explorer? This could be anything from changing the sort order, to changing the view type from icons, to list view, to detail view, changing what columns are visible, or even changing the size of the window. If so, when you’ve returned to that folder at a later date, you’ve probably seen that the customizations remained. That information is stored within “Shellbags”.

Why do digital forensics examiners care about folder view settings, and how could this possibly be of forensic interest? Watch this video and find out!

  • How to Perform Hadoop Forensics

    In this post Chiheb Chebbi shows you how to perform Hadoop forensics. You will learn about…
  • Cloud Forensics: Box

    It seems we really enjoy forensicating desktop apps for cloud services. Last week we start…
  • The Magic of Raw Data Carving

    You have used all of the utilities in your expensive forensic suite, and other programs to…
Load More Related Articles
Load More In Videos

Leave a Reply

Your email address will not be published. Required fields are marked *