Hello Reader,
It's that time again, Sunday Funday time! For those not familiar every Sunday I throw down the forensic gauntlet by asking a tough question. To the winner go the accolades of their peers and prizes hopefully worth the time they put into their answer. This week I am changing things up and letting the winner pick their choice of prizes!
- A signed copy of the new book on Xways Forensics by Eric Zimmerman and Brett Shavers http://www.amazon.com/X-Ways-Forensics-Practitioners-Guide-Shavers/dp/0124116051/ref=sr_1_1?ie=UTF8&qid=1378606383&sr=8-1
The Rules:
- You must post your answer before Midnight PST (GMT -7)
- The most complete answer wins
- You are allowed to edit your answer after posting
- If two answers are too similar for one to win, the one with the earlier posting time wins
- Be specific and be thoughtful
- Anonymous entries are allowed, please email them to dcowen@g-cpartners.com
- In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post
The Challenge:
Your suspect had a corporate laptop running Windows 7 and had a company dropbox account how would you determine the following:
1. What information was synced to dropbox.
2. What information was deleted from his local dropbox sync folders.
3. What account is associated with the dropbox .
4. When the dropbox account was deleted.
Good luck!
Also Read: Daily Blog #76
Post a Comment