I have several cookies of interest on a Windows 7 computer with IE 10 installed. Taken by themselves, it seems the user opened the browser, browsed NBC News, facebook, msn.com, then a collectables website.
But, in analyzing the history, I do not see any corresponding activity. In fact, there is no history entries from that same day at all.
Cache has a couple rss/xml files of that day under Last Visited, but they are unrelated to the cookies in question.
So, my question is, how did these cookies get there? My first theory was that the user had InPrivate browsing on, but a little research shows that InPrivate doesn't leave behind cookies normally.
I need to try and tie these cookies to definite user activity, rather than an automated process. Any ideas?
Any help or suggestions would be appreciated.
Terry
When you write "analyzing the history", what are you analyzing, and with what?
Sorry, forgot to mention.
The WebCacheV01.dat file is dirty, and eseutil won't recover it. Thus my only analysis tool right now is IEF. That is what I am using.