Forensic Data Analysis

 

• Determine if scrubbing software has been used
• Identify web access by the device
• Determine if USB device(s) were connected to the device
• Indication that named files were opened
• Analysis of link files
• Analysis of the hard drive to recover deleted files and file fragment
• System file listing
• System activity report