Challenges in Windows 8 operating system for digital forensic investigations
| aut.embargo | No | en_NZ |
| aut.thirdpc.contains | No | en_NZ |
| aut.thirdpc.permission | No | en_NZ |
| aut.thirdpc.removed | No | en_NZ |
| dc.contributor.advisor | Cusack, Brian | |
| dc.contributor.author | Goh, TingTing | |
| dc.date.accessioned | 2014-05-25T23:02:42Z | |
| dc.date.available | 2014-05-25T23:02:42Z | |
| dc.date.copyright | 2014 | |
| dc.date.created | 2014 | |
| dc.date.issued | 2014 | |
| dc.date.updated | 2014-05-23T04:46:25Z | |
| dc.description.abstract | Windows 8 was released in October 2012 and was followed by Windows 8.1 in October 2013. It was hypothesised that the improvements in Windows 8 and new features of Windows 8 may cause new challenges to digital forensic investigation. Similarly, the forensic techniques that worked perfectly on the past version of Windows might require changes when dealing with a Windows 8 machine. The objective of the research was hence to find out the investigation challenges of the new features in Windows 8 that could impact on the digital forensic investigation process. The research focuses on the digital forensic investigation process gap when dealing with the new version of the operating system. The research first started by reviewing the past Windows platforms with a focus on comparing Windows 7 and Windows 8 to identify the differences. Digital forensic areas such as digital forensic tools and existing digital forensic model were also explored. The problem areas related to digital forensic techniques, Windows 8 digital forensic issues, and Windows 8 features issues were identified. The reviews were narrowed down to review the gap in research in one area. Then the main research question and sub questions for the research were constructed. The main questions chosen for the research was “What new features in Windows 8 Operating System pose new challenges to the digital forensic investigation?” The hypotheses of the research were also defined for testing before the methodology was introduced in order to conduct the experiments to answer the research question and also test the hypothesis. The research phases followed the six phases “Preparation, Incident Response, Data Collection, Data Analysis, the Report and Incident Closure”. Each of the phases was recorded and the results of the findings were used to assist in answering the research questions. Based on the findings, the three new features in Windows 8 of significance were the secure boot, after reset option and communication applications. These features, in Windows 8 were found to bring new challenges for digital forensic investigations. | en_NZ |
| dc.identifier.uri | https://hdl.handle.net/10292/7224 | |
| dc.language.iso | en | en_NZ |
| dc.publisher | Auckland University of Technology | |
| dc.rights.accessrights | OpenAccess | |
| dc.subject | Windows 8 operating system | en_NZ |
| dc.subject | Digital forensic investigations | en_NZ |
| dc.subject | Operating systems | en_NZ |
| dc.subject | Digital forensics | en_NZ |
| dc.subject | Windows forensics | en_NZ |
| dc.subject | Computer forensics | en_NZ |
| dc.title | Challenges in Windows 8 operating system for digital forensic investigations | en_NZ |
| dc.type | Thesis | |
| thesis.degree.discipline | ||
| thesis.degree.grantor | Auckland University of Technology | |
| thesis.degree.level | Masters Theses | |
| thesis.degree.name | Master of Forensic Information Technology | en_NZ |