Difference between pages "Evolution Header Format" and "Windows 8"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
(New Features)
 
Line 1: Line 1:
<pre>
+
Initially Windows 8 had a workstation and server edition. The server edition became Windows Server 2012.
Subject: header test
+
From: Username <username@sendinghost.com>
+
To: Username <username@receivinghost.com>
+
Content-Type: text/plain
+
Date: Sat, 28 Jul 2007 11:52:35 +0200
+
Message-Id: <1185616355.19231.0.camel@localhost>
+
Mime-Version: 1.0
+
X-Mailer: Evolution 2.10.1
+
Content-Transfer-Encoding: 7bit
+
</pre>
+
  
Code responsible for generating Message-ID:
+
== New Features ==
<pre>
+
The following new features were introduced in Windows 8:
camel_header_msgid_generate (void)
+
* [[Windows Shadow Volumes | File History]]
{
+
* [[Windows Storage Spaces | Storage Spaces]]
        static pthread_mutex_t count_lock = PTHREAD_MUTEX_INITIALIZER;
+
* [[Search Charm History]]
#define COUNT_LOCK() pthread_mutex_lock (&count_lock)
+
#define COUNT_UNLOCK() pthread_mutex_unlock (&count_lock)
+
        char host[MAXHOSTNAMELEN];
+
        char *name;
+
        static int count = 0;
+
        char *msgid;
+
        int retval;
+
        struct addrinfo *ai = NULL, hints = { 0 };
+
  
        retval = gethostname (host, sizeof (host));
+
== File System ==  
        if (retval == 0 && *host) {
+
The file system used by Windows 8 is primarily [[NTFS]].
                hints.ai_flags = AI_CANONNAME;
+
                ai = camel_getaddrinfo(host, NULL, &hints, NULL);
+
                if (ai && ai->ai_canonname)
+
                        name = ai->ai_canonname;
+
                else
+
                        name = host;
+
        } else
+
                name = "localhost.localdomain";
+
  
        COUNT_LOCK ();
+
The [[Resilient File System (ReFS)]] was initially available in the Windows 8 server edition but became part of Windows 2012 server edition.
        msgid = g_strdup_printf ("%d.%d.%d.camel@%s", (int) time (NULL), getpid (), count++, name);
+
        COUNT_UNLOCK ();
+
  
        if (ai)
+
== Jump Lists ==
                camel_freeaddrinfo(ai);
+
[[Jump Lists]] are Task Bar artifacts that were first introduced on Windows 7 and are also available on Windows 8.
  
        return msgid;
+
== Prefetch ==
}
+
The prefetch hash function is similar to [[Windows 2008]].
</pre>
+
  
== References ==  
+
== Registry ==
evolution-data-server/camel/camel-mime-utils.c
+
The [[Windows_Registry|Windows Registry]] remains a core component of the Windows operating system.
 +
 
 +
== See Also ==
 +
* [[Windows]]
 +
* [[Windows Vista]]
 +
* [[Windows 7]]
 +
 
 +
== External Links ==
 +
* [http://en.wikipedia.org/wiki/Features_new_to_Windows_8 Features new to Windows 8], Wikipedia
 +
* [http://computerforensics.champlain.edu/blog/windows-8-forensics Windows 8 Forensics - part 1]
 +
* [http://computerforensics.champlain.edu/blog/windows-8-forensics-part-2 Windows 8 Forensics - part 2]
 +
* [http://computerforensics.champlain.edu/blog/windows-8-forensics-part-3 Windows 8 Forensics - part 3]
 +
* [http://propellerheadforensics.files.wordpress.com/2012/05/thomson_windows-8-forensic-guide2.pdf Windows 8 Forensic Guide], by [[Amanda Thomson|Amanda C. F. Thomson]], 2012
 +
* [http://forensicfocus.com/Forums/viewtopic/t=9604/ Forensic Focus: Windows 8 Forensics - A First Look], [http://www.youtube.com/watch?v=uhCooEz9FQs&feature=youtu.be Presentation], [http://www.forensicfocus.com/downloads/windows-8-forensics-josh-brunty.pdf Slides], by [[Josh Brunty]], August 2012
 +
* [http://dfstream.blogspot.ch/2013/03/windows-8-tracking-opened-photos.html Windows 8: Tracking Opened Photos], by [[Jason Hale]], March 8, 2013
 +
* [http://dfstream.blogspot.com/2013/09/windows-8-and-81-search-charm-history.html indows 8 and 8.1: Search Charm History], by [[Jason Hale]], September 9, 2013
 +
 
 +
[[Category:Operating systems]]

Revision as of 12:15, 20 October 2013

Initially Windows 8 had a workstation and server edition. The server edition became Windows Server 2012.

New Features

The following new features were introduced in Windows 8:

File System

The file system used by Windows 8 is primarily NTFS.

The Resilient File System (ReFS) was initially available in the Windows 8 server edition but became part of Windows 2012 server edition.

Jump Lists

Jump Lists are Task Bar artifacts that were first introduced on Windows 7 and are also available on Windows 8.

Prefetch

The prefetch hash function is similar to Windows 2008.

Registry

The Windows Registry remains a core component of the Windows operating system.

See Also

External Links