A PROPOSED FRAMEWORK FOR CRIME INVESTIGATION BASED ON WINDOWS REGISTRY ANALYSIS

摘要

Securing the digital resources in the cyberspace is considered as a very important issue in modern computer systems because of the increased malicious activities. One of its important applications is computer crimes investigation which is based on collecting and analyzing evidences from certain areas in the computer system. Windows registry can be considered as one of the areas that contains valuable information about the system. It stores all hardware and software configurations, user activities, and transactions. Therefore, Windows registry forensics is considered as a hot research field. We proposed a new framework for computer forensics based on Windows registry analysis. It integrates both physical and digital evidence analysis. The purpose of our work is to collect the evidence through some techniques and methods from the Registry. We applied this framework on a case study. Besides, we reviewed and classified the different types of digital crimes.