Subscribe to Anti-Forensics
April 2009
You are browsing the archive for April 2009.
Disable Thumbnail Caching and Wipe Thumbs.db files on a Windows XP System
The thumbs.db file on a Windows XP system can be a treasure chest of 96 x 96 pixel artifacts. By default, in the standard Windows XP home and professional editions, a thumbs.db file is created in folders viewed in the thumbnail view which contain jpegs, bitmaps, GIFs, PNGs and other files.
Delete USB Device History from the Windows Registry (USBSTOR key) and the setupapi.log
This article covers the USBSTOR registry key and the setupapi.log file and methods to delete them. These two artifacts can contain data regarding USB devices that have been plugged into a system. There are other things you should be aware of as well which are covered in the article. Sometimes just deleting a registry key or file is not enough.
FBI Spyware CIPAV (Computer and Internet Protocol Address Verifier)
CIPAV or the Computer and Internet Protocol Address Verifier first came to light in 2007 when it was used during an investigation of a teen who had made bomb threats against his high school.
Contact Form Fixed
It seems the contact form was picking and choosing which input fields to actually save and many email addresses were parsed out.
Recent Comments