Notifications
Clear all
Topic starter
07/02/2011 9:44 pm
I'm working an investigation where I believe that items of interest are being stored as Google Docs and Google Doc Spreadsheets. I haven't had a need to look for artifacts left behind by Google Docs yet and was wondering if anyone knows if there are specific headers / footers or other artifacts specific to Google Docs.
Thanks in advance…
09/02/2011 7:12 pm
Hi,
This is a typical URL from Google Docs
https://
it's possible to find these type of URL in the history file from the browser.
The problem is the content of docs.
I don't know exactly how to do but i think in the cache fiolder or in the lost space with Internet Evidence Finder from jadsoftware
Joël Gomez
Forensic Expert
French Gendarmerie