Title: Analysis and Evaluation of the Windows Event Log for Forensic Purposes
Purposes
Outline:
The Windows Event log is often used in digital forensics cases, but, unfortunately, it is flawed in many ways, and often cannot be seen as a verifiable method of determining events. This project will analyse these weaknesses, and provide best practice for their analysis.
Further details: http://www.soc.napier.ac.uk/~bill/proj200705.htm
|