OneDrive Cloud Fore...
 
Notifications
Clear all

OneDrive Cloud Forensics

1 Posts
1 Users
0 Reactions
1,573 Views
(@nshaktir)
New Member
Joined: 12 years ago
Posts: 1
Topic starter  

Good Afternoon Everyone,

I've searched around the forum for similar discussion topics, but haven't quite found what I am looking for. Currently, I am working on a cloud forensics project with OneDrive and seem to have trouble locating any internal files related to OneDrive. For example, with Dropbox there are a slew of .db and .dbx files that provide a wealth of information regarding the files in the account and the account itself. These files are located in the C drive under users\<username>\AppData\Local\Dropbox\Instance1.

When I try to locate such files in the Local OneDrive folder I can't seem to find anything of use. I seem to remember hearing that OneDrive does not leave such files on local machines. However, that was 2 years ago when it was SkyDrive. I didn't know if anyone had any luck finding such files. If so I'd greatly appreciate you sharing the name of the file I should be looking for and the location.

I'm interested in finding metadata related to Timestamps, Events, full path for file, file version number, any sort of user attribution, deleted files, unlinked devices, etc.

-Shakti


   
Quote
Share: