This standard specifies the log inspection method for Windows operating systems, including Windows 2000, Windows XP, Windows 2003, Windows Vista and Windows 7. This standard applies to the examination of electronic evidence in the field of forensic science.
GA/T 1071-2013 history
2021GA/T 1071-2021 Forensic Science Electronic Evidence Windows Operating System Log Inspection Technical Specifications
2013GA/T 1071-2013 Technical specifications for Windows operating system log examination of electronic forensics