2012-05-03 windows-8-forensic-guide sec http://propellerheadforensics.files.wordpress.com/2012/04/thomson_windows-8-forensic-guide.pdf