From Forensics Wiki
Revision as of 08:28, 14 September 2013 by Joachim Metz
- Search integrated in operating system
- Transactional NTFS (TxF)
- Transactional Registry (TxR)
- Shadow Volumes; the volume-based storage of the Volume Shadow Copy data
- Windows XML Event Log (EVTX)
- User Account Control (UAC)
The file system used by Windows Vista is primarily NTFS.
The Windows Registry remains a central component of the Windows Vista operating system.