Windows Vista makes forensic PC exam easier
By Ruben Francia
Vista does not only comes with a host of new OS features, but it also comes with features that will help those seeking evidence of how a particular computer was used, the American Bar Association (ABA) Journal reports in the July issue.
Jason Krause, a legal affairs writer for the ABA Journal said “[Vista] keeps a lot more information and more detailed information about what a person does with a PC.â€
“With Vista, you can look in there and see something was accessed on Monday, Tuesday and Saturday at such-and-such a time going back months,†says John Simek, co-founder of Sensei Enterprises, a legal technology and computer forensics firm.
Also, since Vista has a shadow copy feature, which saves copies of the files without having to overtly create a backup of them, “It is now possible to know when the file was created, edited and deleted,†Cyber-forensic expert Chirag Unadkat told Moneycontrol.
While Microsoft Vista was designed to prevent the loss of data and allow users to find documents faster by keeping an index of things they have worked on, the OS also makes the job of investigators much easier.
From a litigator’s perspective, this means that the chances of locating evidence is better and the investigative task becomes easier.
Related:







August 4th, 2007
[…] Contact the Webmaster Link to Article windows vista Windows Vista makes forensic PC exam easier » Posted at […]