|
|
Article DetailsBrief introduction into the Windows Media Player program and analysis of currentdatabase_372.wmdb file and how to extract the content for review. This article may serve as an aid to forensic examiners or data recovery technicians.
Using FTK forensic software to detect SQLite Database Files for processing in SQLite Forensic Reporter
Processing SQLite Databases using Templates (applicable to forensic analysis and data recovery). This article covers the processing of SQLite database files for forensic analysis, security auditing and data recovery purposes.
SQLite Forensic Reporter is the most powerful tool available for analysing and reporting on the contents of SQLite database files on the market to date. With batch processing, advanced identification, decoding and reporting this is a perfect solution for computer & mobile phone examiners and data recovery technicians.
These days, catching a criminal involves the use of highly sophisticated technologies which can generate vital evidence good enough to prove whether a person is really guilty or not. One of the known applications that can be taken under consideration in such cases is the forensic software or data recovery software.
- Active Links: 13
- Pending Links: 1
- Todays Links: 0
- Total Articles: 26
- Total Categories: 3
- Sub Categories: 0
Windows 7 Sticky Notes Primer |
| Date Added: June 02, 2009 02:52:12 PM |
| Author: admin |
| Category: Documents |
The Microsoft Windows 7 operating system includes native sticky notes feature, allowing a user to quickly create electronic 'post it' notes as reminders which are displayed on the desktop.
Sticky notes are stored in a file titled as StickyNotes.snt.
The stickynotes.snt file can be found in the following location: VOLUME\Users\OS PROFILE\AppData\Roaming\Microsoft\Sticky Notes
The screenshot below show sticky notes running and displayed on the desktop:
There can be multiple stickynotes.snt files if multiple profiles exist on a system. The content of the stickynotes.snt files can include but is not limited to sticky note content, when the note was created and modified. The content of the Stickynotes.snt file can be previewed and extracted for further inspection using the Structured Storage Extractor, a forensic software tool part of the SC Suite.
|
