Find out the recent activities of the users using hard drive through jump list

6^th International Conference on forensic Research and technology

September 18-19, 2017 Houston, USA

Rakhi Tyagi, komal Yadav and Mansi gupta

I M E Law College, India
Galgotia University, India
Patiala University, India

Posters & Accepted Abstracts: J Forensic Res

Abstract :

The objective of this research paper is to find out the recent activities of the hard drives and removable disk by using jump list files as well as from the window registry through MRU. In computer forensic investigation, an investigator may find out the recent activities log which is a good source for evidence gathering. In this paper, we use the OS forensic window registry analysis and jump files to investigate the recent activities on particular dates and the program and application runs with time stamp. On the forensic point of view, registry is a good source where an investigator can gather an evidence for further analysis like the last login time, USB information, recent activities etc.