Following on from my post about Safari browser history I want to touch upon Safari cache. My suspect is running Mac OSX 10.5.6 Leopard and Safari 3.2.1. This version stores browser cache in an sqlite3 database … [Continue Reading]
Recovering Safari browser history from unallocated
One of my cases involves the examination of an Apple Mac running Mac OSX 10.5.6 Leopard . The primary web browser in use is Safari version 3.2.1. Typically with Safari I run the Comprehensive Internet History search in Encase but in this case the … [Continue Reading]
Prefetch and User Assist
It seems to me that more and more cases I see only have evidence within unallocated clusters. It is also a frustration that the CPS seem less and less interested in any artefact found there. They seem to have the view that any thing currently living … [Continue Reading]
- « Previous Page
- 1
- …
- 614
- 615
- 616
- 617
- 618
- …
- 621
- Next Page »