Issue 1 – Feb 2010 | Page - 9
particular system. Even though these are definitive, for they cannot be associated
UserAssist Key
ROT-13 Cipher Decoded With the UserAssist key, a forensic examiner can gain a better understanding of what types of files or applications have been accessed on a
with a specific date and time, it may still indicate a specific action by the user.