PAPERS
THE SIXTH INTERNATIONAL CONFERENCE ON FORENSIC COMPUTER SCIENCE
Print ISBN 978-85-65069-07-6 - Online ISBN 978-85-65069-05-2, pp 182-189
DOI: 10.5769/C2011021 and http://dx.doi.org/10.5769/C2011021
Webmail evidence recovery: a comparison among the most used Web browsers and webmail services
By Pedro Monteiro da Silva Eleutério, and Jane Dirce Alves Sandim Eleutério
To download this paper, click here.
ABSTRACT
The content of electronic messages is often very useful in criminal investigations. Many Internet users use a free webmail service, which stores the electronic messages on remote servers. Thus, these messages are not directly stored on the digital devices seized by law enforcement. However, Web browsers have a caching function, which might store locally some hypertexts browsed by the user. The main objective of this work is to establish a relationship among the most used Web browsers and webmail services, helping forensic experts to recover such evidence more quickly and efficiently. The performed experiments showed this type of evidence may be find in different areas/files in hard disk drives and may vary depending on the Web browser and webmail service used.
KEYWORDS
Computer forensics, webmail recovery, caching function, Web browser, data carving.
To return to the "Published Papers" main page, click here.