The Cloud Forensics module provides you with the instructions and devices to develop your hands on skills in the following topics.
- Windows Prefetch Artifacts.
Exercise 1 - Windows Prefetch Artifacts
You can collect prefetch file artifacts with a disk editor or forensics tool. In the following activity, you use WinHex’s Data Interpreter to find an application’s MAC dates and times and the number of times Dropbox has run.