期刊名称：Journal of Digital Forensics, Security and Law
印刷版ISSN：1558-7215
电子版ISSN：1558-7223
出版年度：2012
卷号：3
期号：1795
页码：33-54
语种：English
出版社：Association of Digital Forensics, Security and Law
摘要：A good portion of today's investigations include, at least in part, an examination of the user's web history. Although it has lost ground over the past several years, Microsoft's Internet Explorer still accounts for a large portion of the web browser market share. Most users are now aware that Internet Explorer will save browsing history, user names, passwords and form history. Consequently some users seek to eliminate these artifacts, leaving less for examiners to discover during investigations. However, most users, and probably a good portion of examiners are unaware Automatic Crash Recovery, can leave a gold mine of recent browsing history in spite of the users attempts to delete historical artifacts.
