Talk:Jump Lists

From ForensicsWiki
Jump to: navigation, search

06:18, 24 August 2015 (UTC) Moved to discussion. Need to add a reference to the tests, without these claims cannot be verified.

Note: Jump Lists can prove to be considerably valuable during an examination, as the files appear (in limited testing) to persist after the application itself is removed from the system. In one test, iTunes 10 was installed on a 64-bit Windows 7 system, and two audio files (i.e., CyberSpeak podcasts) were launched via iTunes. The Jump Lists persisted after the iTunes was removed from the system.