Windows backups, tr...
 
Notifications
Clear all

Windows backups, trace evidence of such

2 Posts
2 Users
0 Reactions
982 Views
(@coloradoforensics)
Active Member
Joined: 13 years ago
Posts: 15
Topic starter  

Hello all,

We have a client that claims Windows used auto backup to push her files onto her external drive, claiming that she did not copy them onto the external herself.

Is there a way to see if she had her computer set to auto backup on a specific date and time, or auto backup set up to do periotic backups on her Windows computer? We have dates of these files, roughly 80 on her external drive, and all of them with the same created date and time.

Thanks, short window to try to get this resolved today if anyone can help!


   
Quote
(@Anonymous 6593)
Guest
Joined: 17 years ago
Posts: 1158
 

We have a client that claims Windows used auto backup to push her files onto her external drive, claiming that she did not copy them onto the external herself.

So the technical solution needs to be specified in order to say what artifacts may be available.

Is there a way to see if she had her computer set to auto backup on a specific date and time, or auto backup set up to do periotic backups on her Windows computer? We have dates of these files, roughly 80 on her external drive, and all of them with the same created date and time.

Might be what I think is/was called File History. I used it on Windows 7 just connect the external backup drive, and sometimes also tell Windows 'go ahead', though I think it did that automatically after a while. As far as I recall, the files ended up in a special folder on the target drive … but it's ages since I used that. Some of it was cached somewhere if the backup drive was not available, and once that space filled up you got a 'connect drive now, or else …' type of message.

But it could just as easily be third-party software, of course.


   
ReplyQuote
Share: