Roman Locher (Arina AG)

Abstract

Let’s face it: To keep up to date with all the changes in forensic artifacts, is a really hard, if not impossible, task for many-investigators and forensic experts. To help you out on this challenge on the Windows operating system, we provide this workshop that will focus on the forensically interesting areas in the Windows 10 operating system. You will learn about newly gained forensic artifacts, but also about the ones we might have lost compared to Windows 7/8. Among other topics we will talk about the new Microsoft Edge browser, the Recycle Bin, Prefetch Files, Thumbnails, and many more.