Title: Recover artifacts from physical media.
Course: Cyber Security/Forensics Infusion Units (CYBR) > Section: Unit 3: CYBER FORENSICS: Exploring Media Forensics

Recovered artifacts should include examples of the following:

- Registry entries describing the system hardware and software
- System and Internet history log files
- MAC time stamps
- Data from different file types from allocated space, file slack space, RAM slack space, and unallocated space