18 February 2014 Implementation of a forensic tool to examine the Windows registry
Author Affiliations +
Abstract
This paper describes the design and prototypic implementation of a forensic tool for the automated analysis of the Windows registry. The concept provides a complete object-oriented analysis of functional requirements as well as detailed descriptions of the program components and the software architecture of the tool. The prototypical implementation of the tool on basis of the developed concept shows its consistency. The implementation is partially described as object-oriented design. Here, special emphasis is placed on the ease of maintenance and extensibility of the program. Information to keys, which are to be read during the analysis are defined in the XML script files. The subsequently defined tests prove the consistency of the concept and the implementation [8].
© (2014) COPYRIGHT Society of Photo-Optical Instrumentation Engineers (SPIE). Downloading of the abstract is permitted for personal use only.
Christian Leube, Christian Leube, Knut Kröger, Knut Kröger, Reiner Creutzburg, Reiner Creutzburg, } "Implementation of a forensic tool to examine the Windows registry", Proc. SPIE 9030, Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications 2014, 90300J (18 February 2014); doi: 10.1117/12.2037020; https://doi.org/10.1117/12.2037020
PROCEEDINGS
11 PAGES


SHARE
RELATED CONTENT

The JWST data management system engineering database
Proceedings of SPIE (September 13 2012)
Safety by design and future developments
Proceedings of SPIE (October 03 2001)
Real-time query system based on three layers
Proceedings of SPIE (September 02 2003)

Back to Top