Unlock document.
This document is partially blurred.
Unlock all pages and 1 million more documents.
Get Access
Evidence Report for Project: InChap14
Project Number: InChap14
Project Description:
Image Files:
File Name: C:\Work\Data Files\Chap14\gcfi-win98.dd
Image File Type: DFT Image
File Number: Unknown
Technician Name: Unknown
Time Zone Information:
Time Zone: (GMT-08:00) Pacific Time (US & Canada); Tijuana (Pacific Standard Time)
Hard Disk: C:\Work\Data Files\Chap14\gcfi-win98.dd
Volume Name: NO NAME
Disks:
Evidence of Interest:
Total Evidence Items of Interest: 6
Hard Disk: Unknown
List of Files:
C:\Work\Data Files\Chap14\gcfi-win98.dd\WINDOWS\Application
___________________________________________________________________________
_____________________
Investigator's comments: Files for case report InChapter14
___________________________________________________________________________
_____________________
Investigator's comments: Files for case report InChapter14
___________________________________________________________________________
_____________________
C:\Work\Data Files\Chap14\gcfi-win98.dd\My Documents\SB\Inventories\Speedy
Investigator's comments: Files for case report InChapter14
___________________________________________________________________________
_____________________
Investigator's comments: Files for case report InChapter14
___________________________________________________________________________
_____________________
C:\Work\Data Files\Chap14\gcfi-win98.dd\My Documents\SB\Sales\Speedy
___________________________________________________________________________
_____________________
Clusters of Interest:
File Signature Mismatch:
Registry Keys of Interest:
Event Log Entries of Interest:
Internet Activity Information:
Search Results:
-----------------------------------------------------------------
Image File Name: C:\Work\Data Files\Chap14\gcfi-win98.dd
-----------------------------------------------------------------
Keyword:.ods, .sxc, .dbx
-----------------------------------------------------------------
WINDOWS\Application
Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook
Express\Pop3uidl.dbx
WINDOWS\Application
Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook Express\Deleted
Items.dbx
WINDOWS\Application
Data\Identities\{95286EE0-564A-11D3-82D6-BF9664A29206}\Microsoft\Outlook Express\Sent
Items.dbx
WINDOWS\Recent\Speedy Financials3.sxc.lnk
List of words found:
-----------------------------------------------------------------
Project Notes:
