Whenever a new operating system or new version of an operating system is released, forensic investigators must re-examine the new operating system or new version. They do so to determine if there are significant differences that will impact and change the way they perform their investigations. With the release of Microsoft's latest operating system, Windows 8, and its update, Windows 8.1, understanding the similarities and differences between Windows 8 and previous operating systems such as Windows 7 is critical. This paper forensically examines Windows 7 and Windows 8 to determine those similarities and differences.
Computing Security (MS)
Department, Program, or Center
Department of Computing Security (GCCIS)
Wilson, Peter J., "A Forensic Comparison: Windows 7 and Windows 8" (2013). Thesis. Rochester Institute of Technology. Accessed from
RIT – Main Campus