Question 1 Shellbags
a) What are some reasons that shellbag dissection can be considerable to an investigator?
b )Have you been unguarded to shell bags, or made an dissection of them dissect of a exemplar workflow?
c) What types of crimes can you presume where shell bags could collect estimable notice?
a)ShellBags is exceptington excepting a vocable that is used to belong peculiar area of dissection.Generally windows stores user preferences in Explorer.The main advantgae of ShellBags dissection to an investigator is that, it can inform advent to folders, finishs,storage devices and other media. ShellBags so inform user’s advent to media uniform that contrivance is no longer.In some peculiar provisions the user’s advent to these media gain be recorded and stick.ShellBags so inform corporation violations , by illustrating advent to finish paths.
b)Yes, in our corporation as a dissect of purpose we made an dissection of them dissect of a exemplar workflow.Parsing ShellBagsprovides us advent to superficial media and off-system communications.
Computing and Cybercrime Investigation