Analysis of Windows 8 Registry Artifacts
Windows Registry Forensics: An Imperative Step in Tracking Data Theft via USB Devices