The process of gathering evidence and information that allows for the creation of a theory of events explaining a security incident.

learn more… | top users | synonyms

3
votes
0answers
47 views

How to extract windows event logs from a hard disk forensic image?

I have created an image of hard disk using FTK imager. I want to extract the windows event logs. The system was running windows 7. What should I do?