Analysis of User Activity based on Shortcut Files in Recent Folder
Luo Wen-hua · Xinxi wangluo anquan · 2013
As important evidences and clue sources in computer crime investigation, the information of user activity plays an important role in the aspect of revealing detail of offender’s operation. Based on analysis of data structure for shortcut files, this paper analyses the change situation of shortcut files in recent folder with user activity emphasisly, and illustrates the method of analysis of user activity based on shortcut files in recent folder with real case. The method is proved to be accurate and efficient in real work of digital investigation.