John McAfee and the EXIF Photograph Metadata
In December 2012, John McAfee, who had famously built and sold his McAfee antivirus company in 1996, was wanted by Police in his country of residence, Belize as a person of interest in connection with the murder of his neighbour, Gregory Viant Faull who was found dead of a gunshot wound in November 2012. For …
The 1 Billion Dollar Claim for Facebook Ownership
Paul Ceglia was a wood pellet salesman who lived in Wellsville, New York State and alleged that he had written a contract in 2003 to hire Mark Zuckerberg, the Facebook CEO to carry out computer programming for his company, called Street Fax, after he had responded to an advert published by Ceglia on Craigslist. Mark …
Digital Forensics – System Volume Information
The Microsoft Windows operating system automatically stores a backup of files present on the hard drive and places these files within a ‘hidden’ and compressed system folder named the System Volume Information directory. This backup process can also be manually carried out by the user. If there is a system or software failure or corruption …
Digital Forensics – Thumbcache Images
Thumbcache files are database files that are automatically generated by the Microsoft Windows operating system from Windows Vista onwards within the ‘hidden’ system directory located at the path \Users\[User Profile Name]\AppData\Local\Microsoft\Windows\Explorer\. Images within the Thumbcache files are automatically stored when a folder on the computer or a device connected to it is accessed by the …
Digital Forensics – Unallocated Clusters
TWhen files are deleted from a computer or storage device, the data forming that file is not physically removed from the drive, instead, the entry within the Master File Table is altered to remove the allocation of that space on the device and the area then becomes available for newer files to be stored. This …