I am conducting a forensic analysis of a Windows XP computer. Under the user profile, in the folder "Application Data - Google - Local Search History", there are 5 files containing the keywords used for searches in each category. The dates on these files are 2 months in the past. I know from the IE cache that the user has recently performed image searches using specific keywords. Those kaywords are not added to the end of list of existing keywords and the file dates are not updated. Google Toolbar installed on IE7 and AutoComplete is on.
Any ideas or explanations as to why not?
Thanks
Look at the pssp in the registry for autocomplete entries.
Thanks gmarshall139… The entries themselves are not really the issue. The issue is why the Google keyword searches are not appended to the corresponding Google files in C\Documents and Settings\username\Application Data\Google\Local Search History since Google toolbar is installed and IE7 Autocomplete is on.