You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to
investigate e-mail information of an employee of the company. The suspected employee is using
an online e-mail system such as Hotmail or Yahoo. Which of the following folders on the local
computer will you review to accomplish the task? Each correct answer represents a complete
solution. Choose all that apply.
A.
History folder
B.
Temporary Internet Folder
C.
Cookies folder
D.
Download folder
Explanation:
Online e-mail systems such as Hotmail and Yahoo leave files containing e-mail message
information on the local computer. These files are stored in a number of folders, which are as
follows:
Cookies folder
Temp folder
History folder
Cache folder
Temporary Internet Folder Forensic tools can recover these folders for the respective e-mail
clients. When folders are retrieved, e-mail files can be accessed. If the data is not readable,
various tools are available to decrypt the information such as a cookie reader used with cookies.
Answer option D is incorrect. Download folder does not contain any e-mail message information.