[tor-talk] Forensics on Tor

[Joe Btfsplk]

On 1/23/2014 5:12 PM, Mirimir wrote:
> I wouldn't run VMs on Windows with any expectation of privacy. Only a 
> year or so ago, shellbags were not common knowledge. Only the forensic 
> community and hard-core black hat types knew about them. It's arguable 
> that many similar features in Windows remain undocumented.[1]

[1] I'd like to hear more.  "Arguable" mean there is some evidence?