1. Who said that transaction goes from logs to db;Baher,2008
2. Reliably recovering evidential data from volume shadow copies in windows vista and windows 7;Crabtree,2010
3. Douglas J. 2009. Forensic artefacts present in microsoft windows desktop search. Master’s Thesis, Cranfield University.
4. Gordon JM. 2009. A forensic examination of windows desktop search (version 3). Master’s Thesis, Cranfield University.
5. Windows vista and digital investigations;Hargreaves;Digital Investigation,2008