coltwanger
Highest Rated Comments
coltwanger1 karma
I dumped the Windows search database on a case this week to try and tie thumbcache images to their respective file paths. I've always had trouble getting the ese database to be read correctly and this is the first time I've got it to load. I know the images viewed were on a thumb drive, but I didn't see any reference to any of the thumbcache IDs of the images on the drive at all.
So my question is, does the Windows search database store info on removable media?
My case is over and done with already but it would be good info for future cases. I work employee forensics for policy violations and data theft and use EnCase as my primary tool.
coltwanger2 karma
I've heard some friends who have been in the Sacramento river this summer that it's a decent temperature. Usually it seems quite cold, is this due to the lack of snowfall over winter?
View HistoryShare Link