Study on Pagefile.sys in Windows System
Nisarg Trivedi · IOSR Journal of Computer Engineering · 2014
Pagefile.sys is a file that is used by Microsoft Windows to store frames of memory that do not currently fit into physical memory.It means Windows uses a page file to store data that can't be held by your computer's random-access memory when it fills up.Analysis of the Pagefile.sysgives the information of which events were done on PC.Analysis of Pagefile.syscan give the sensitive information such as User Ids, Passwords, Hidden Processes, Download info, Search Activity of Browser etc.This Paper represents various approaches and tools used to capture and analyze data from Pagefile.sys.