Windows 8操作系统新变化及其取证分析  

The New Changes and Forensic Analysis of Windows 8

作　　者：吴玉强[1] 

机构地区：[1]南京森林警察学院,江苏南京210023

出　　处：《电脑与信息技术》2016年第1期31-33,共3页Computer and Information Technology

基　　金：中央高校基本科研业务专项资金项目(项目编号:LGQN201502)

摘　　要：所谓Windows 8操作系统新变化是与之前Windows系列操作系统相比较而言的,在计算机取证工作中要特别注意不同版本操作系统的变化对取证工作带来的影响。文章主要对Windows 8与之前几个版本之间进行对比,总结归纳出Windows 8操作系统的一些新变化,并重点结合取证工作重点对这些新的变化进行分析,以期为计算机取证工作带来更多便利。The so-caUed new changes Windows 8 operating system is Windows family of operating systems before comparison, and in computer forensics work should pay special attention to the impact of changes in different versions of the operating system for forensic work brings. This paper focuses on Windows 8 between several versions and were compared before, summarized some new changes in Windows 8 operating system, and the focus of the work focuses on the combined evidence of these new changes were analyzed, in order to bring more work for the computer forensics convenience.

关 键 词：WINDOWS 8 新变化 电子数据 取证 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]