August 2017
Beginner to intermediate
274 pages
8h 11m
English
The Mail app is native to the users machine, although an increasing number of people are moving to Microsoft's cloud-based service instead, which as discussed in the previous section presents certain forensic challenges.
Basic information, such as contacts with whom the user frequently interacts, is stored in the \Users\Username\AppData\Local\Comms folder so that it can be easily recalled when the user wants to send a new message. Luckily, this also makes it available for forensic investigation!
Read now
Unlock full access