Index.dat
The browser can be a source of both direct evidence and circumstantial or supporting evidence. Obviously, in cases of child pornography, the browser might contain direct evidence of the specific crime. You may also find direct evidence in the case of cyberstalking. However, if you suspect someone of creating a virus that infected a network, you will probably find only indirect evidence, such as evidence of the suspect having searched virus creation or programming-related topics.
Even if the suspect’s browsing history has been erased, it is still possible to retrieve it if he or she was using Microsoft Internet Explorer. Index.dat is a file used by Internet Explorer to store web addresses, search queries, and recently opened files. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access