I spotted a very interesting article on web browser forensics linked to on David’s blog.

The article is in two parts and documents the investigation of the browser logs on a fictitious user’s PC. The article includes downloadable browser logs to allow the article reader to take part in the investigation. The article also includes links to freeware and commercial forensic software.

It is amazing how much data is retained on a PC. I was asked recently to do a scan of a client’s PC and I was able to rebuild Hotmail messages read a year and a half earlier on the PC!

Part one of the article is here and part two is here.