Difference between revisions of "Windows 8"

From ForensicsWiki
Jump to: navigation, search
(External Links)
(Registry)
Line 22: Line 22:
 
== Registry ==
 
== Registry ==
 
The [[Windows_Registry|Windows Registry]] remains a core component of the Windows operating system.
 
The [[Windows_Registry|Windows Registry]] remains a core component of the Windows operating system.
 +
 +
On Windows 8 Amcache.hve replaces RecentFileCache.bcf and uses the [[Windows NT Registry File (REGF)]] format.
 +
 +
<pre>
 +
C:\Windows\AppCompat\Programs\Amcache.hve
 +
</pre>
  
 
== See Also ==
 
== See Also ==

Revision as of 01:10, 5 December 2013

Initially Windows 8 had a workstation and server edition. The server edition became Windows Server 2012.

New Features

The following new features were introduced in Windows 8:

File System

The file system used by Windows 8 is primarily NTFS.

The Resilient File System (ReFS) was initially available in the Windows 8 server edition but became part of Windows 2012 server edition.

Jump Lists

Jump Lists are Task Bar artifacts that were first introduced on Windows 7 and are also available on Windows 8.

Prefetch

The prefetch hash function is similar to Windows 2008.

The Windows Prefetch File Format was changed on Windows 8.1 to version 26. (note this could be Windows 8 as well but has not been confirmed)

Registry

The Windows Registry remains a core component of the Windows operating system.

On Windows 8 Amcache.hve replaces RecentFileCache.bcf and uses the Windows NT Registry File (REGF) format.

C:\Windows\AppCompat\Programs\Amcache.hve

See Also

External Links