The Prize:

The Rules:

You must post your answer before Monday 3/23/14 2PM CST (GMT -5) The most complete answer wins You are allowed to edit your answer after posting If two answers are too similar for one to win, the one with the earlier posting time wins Be specific and be thoughtful Anonymous entries are allowed, please email them to dcowen@g-cpartners.com In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post

Hello Reader,This Sunday Funday is going up later in the day than normal so I will shift the deadline to be later in the day as well. If you watched the Forensic Lunch this Friday you heard Nasa & Khizra talk about a new feature in Windows 8 called File History. For this Sunday Funday let's see how well you've been keeping up with an operating system that has been out for over a year for a prize worth fighting for.What changes have occurred between Windows 7 and Windows 8that have created new forensic artifacts for examiners to recover and analysis. List as many as you can find with a short description of what they are/mean/do.