Posted: Fri Oct 29, 2010 5:08 am Post subject: Computer Forensics Evidence Questions
I have a few questions around Computer Forensics investigations and your responses would be greatly appreciated:
1) Can Computer Forensic experts distinguish if the profile of a facebook user was accessed by the user, after he loged in his account or if the profile was simply visited by another facebook user by analysing the browser's history stored on the PC's hard disk?
2) Can CF experts also detect by examining a PC's hard drive if a user logged in using a particular Facebook account and subsequently posted messages on his Wall or sent friend requests?
3) Are web emails (such as yahoo, hotmail) saved on a PC's hard drive?
4) Does the browser's history include visits to one's email account (e.g. say that that you login into your hotmail or yahoo account, does the browser history show a different address than the general address of hotmail/ yahoo? is it enough to say from the address whose the account
Under a variety of circumstances, it is possible to prove certain actions taken on certain web sites by a given user account on a given computer.
Whether that applies in your specific circumstances would require a thorough forensic exam by an examiner with appropriate training and/or experience. _________________ Tony Patrick, B. Inf Tech, CFCE
Patrick Computer Forensics Inc.
Memphis TN, USA
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum