Cloud Forensics

Introduction

The Cloud Forensics module provides you with the instructions and devices to develop your hands on skills in the following topics.

• Windows Prefetch Artifacts.

Exercise 1 - Windows Prefetch Artifacts

You can collect prefetch file artifacts with a disk editor or forensics tool. In the following activity, you use WinHex’s Data Interpreter to find an application’s MAC dates and times and the number of times Dropbox has run.