Looking for pornography on a ‘cleaned’ system
The first time I ‘liked’ Windows
- Perpetrator erased and ‘cleaned’ ?all? the evidence from their system.
- I searched for many hours and there were no files or deleted files or slack space content with the evidence.
- The only ‘hits’ were from the windows ‘pagefile.sys’ file
- Let’s see what we can see...