Widows Steady State Cache file Forensic Analysis RRS feed

  • General discussion

  • Nutshell I have seen the question asked before, but no response was given. I figured I would ask the question myself

    The Cache file that is created during window steady state, how can it be or what is needed to reconstruct or interpret the file ?

    I have done some internet searching which pretty much ends up with Microsoft needed to tell the forensic community how to decipher this cache file
    • Changed type Sean Zhu - Monday, September 14, 2009 8:28 AM
    Friday, September 11, 2009 10:50 PM