Skip to content

Take the State of DFIR Survey Caseloads, AI, tools and careers. 8 minutes, anonymous, early access to the report.

Take the survey

Notifications

Clear all

Windows CSC?

General (Technical, Procedural, Software, Hardware etc.)

Last Post by Coloradoforensics 12 years ago

3 Posts

2 Users

0 Reactions

1,230 Views

RSS

Coloradoforensics

(@coloradoforensics)

Active Member

Joined: 14 years ago

Posts: 15

Topic starter 26/03/2015 12:52 am [#12812]

We have files that have no file size (FTK Zero Length File) with Windows\CSC in the path. Can someone give a quick explanation of the origin of the file or how to find out why it is on this users hard drive?

Quote

jblakley

(@jblakley)

Estimable Member

Joined: 20 years ago

Posts: 110

26/03/2015 11:09 pm

From what I'm seeing, it was the replacement for Windows Offline Files feature. It stands for Windows Client-side caching

http//blogs.msdn.com/b/oldnewthing/archive/2003/08/27/54712.aspx
http//support.microsoft.com/en-us/kb/942960
http//www.technlg.net/2010/10/cwindowscsc-folder.html

John

ReplyQuote

Coloradoforensics

(@coloradoforensics)

Active Member

Joined: 14 years ago

Posts: 15

Topic starter 26/03/2015 11:13 pm

Thanks John, I will take a look at this.

ReplyQuote

Enterprise Partners

Partners

Academic Partners

Share:

8 Forums
15.9 K Topics
92.5 K Posts
18 Online
42 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed