• Diana Rathod
• Dr. Priyanka Sharma

Malware is one of the most serious threats to system security. It causes complex problems and issues on the system. Purpose of this research work is to forensically analyze and investigate a malware infected windows system. Windows operating system is infected with a ransomware. Forensic artifacts are obtained using various digital forensic tools and techniques such as recovery of lost and encrypted data, volatile memory analysis using memory forensics and registry analysis. Behavior of the malicious code is analyzed in a controlled sandbox environment. Here, we are using various open source tools such as FTKImager, Autopsy, Volatility Framework and open source cuckoo sandbox environment.

Digital Forensics, Encrypted Data Recovery, Memory Forensics, Malware analysis, Cuckoo Sandbox, Ransomware, Windows Operating System.

"Digital Forensic Analysis Of Ransomware Infected Windows System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org), ISSN:2349-5162, Vol.6, Issue 5, page no.652-664, May-2019, Available :http://www.jetir.org/papers/JETIR1905197.pdf

"Digital Forensic Analysis Of Ransomware Infected Windows System", International Journal of Emerging Technologies and Innovative Research (www.jetir.org | UGC and issn Approved), ISSN:2349-5162, Vol.6, Issue 5, page no. pp652-664, May-2019, Available at : http://www.jetir.org/papers/JETIR1905197.pdf