Extracted Content > Web History

Any Autopsy specific discussions, events, module releases, that don't fall into the other categories.

Moderator: carrier

Extracted Content > Web History

Postby Zantac150 » Wed Jan 13, 2016 9:22 pm

I'm using Autopsy v4.0.0 on Windows 10 Pro 64Bit, build 10.0.10240.16392

I'm curious to know where the extracted content is coming from; in other words if CCleaner has been run (let's assume all options are checked) and free space has been wiped securely (7 passes) -- how is web history showing up? Same question with web search and cookies. Where is this information stored deep down that sqlite can query for it?
Zantac150
 
Posts: 1
Joined: Wed Jan 13, 2016 9:07 pm

Return to Autopsy General

Who is online

Users browsing this forum: No registered users and 1 guest