XPRestorePoints
XP Restore Points - System Volume Information directory
- 1 path
- Version 1
- Phill Moore
Paths on disk
1 path
References
4 links
- sans.org/security-resources/posters/windows-forensic-analysis/170/download(opens in new tab)
- topic.alibabacloud.com/a/font-classtopic-s-color00c1derestorefont-point-forensics-notes-for-the-forensic-processing-of-windows-xp-font-classtopic-s-color00c1derestorefont-points_1_15_32116346.html(opens in new tab)
- researchgate.net/publication/220345974_Forensic_analysis_of_System_Restore_points_in_Microsoft_Windows_XP(opens in new tab)
- stevebunting.org/udpd4n6/forensics/restorepoints.htm(opens in new tab)