Registry entry for ...
 
Notifications
Clear all

Registry entry for the last time Internet Cache was deleted

1 Posts
1 Users
0 Reactions
418 Views
(@creeshie)
Active Member
Joined: 16 years ago
Posts: 11
Topic starter  

I have used EnCase to extract .dat files containing the Internet History for a user. There is minimal Internet history after viewing the .dat files in CacheBack and some other tools and I believe the user has cleared their cache deliberately or their browser was set to empty it on closure.

Is anyone aware if there is a registry entry (Vista) that contains the date and time the Internet Browsing History was deleted, or if this information would be stored in one of the Event logs.

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs was also clean of any entries.

Thank you


   
Quote
Share: