This might be a dupe, but I couldn’t find it using the fabulous search tool over yonder –>
Stumbled across a good set of articles from the fine folks at Security Focus…
Notes on Vista Forensics (Part 1, Part 2)
In part one of this series we looked at the different editions of Vista available and discussed the various encryption and backup features which might be of interest to forensic examiners. In this article we will look at the user and system features of Vista which may (or may not) present new challenges for investigators and discuss the use of Vista itself as a platform for forensic analysis.
The articles are a good overview, but something tells me that there will be a more useful overview this summer in Vegas.
Tags: forensics, vista, encase
