HOME    SCOPE    VENUE    COMMITTEE    GUIDELINES    AWARD    PAPERS     CONFERENCES
PAPERS
THE SIXTH INTERNATIONAL CONFERENCE ON FORENSIC COMPUTER SCIENCE

Print ISBN 978-85-65069-07-6 - Online ISBN 978-85-65069-05-2, pp 182-189
DOI: 10.5769/C2011021 and http://dx.doi.org/
10.5769/C2011021


Webmail evidence recovery: a comparison among the most used Web browsers and webmail services

By Pedro Monteiro da Silva Eleutério, and Jane Dirce Alves Sandim Eleutério




To download this paper, click here.
ABSTRACT

The content of electronic messages is often very useful in criminal investigations. Many Internet users use a free webmail service, which stores the electronic messages on remote servers. Thus, these messages are not directly stored on the digital devices seized by law enforcement. However, Web browsers have a caching function, which might store locally some hypertexts browsed by the user. The main objective of this work is to establish a relationship among the most used Web browsers and webmail services, helping forensic experts to recover such evidence more quickly and efficiently. The performed experiments showed this type of evidence may be find in different areas/files in hard disk drives and may vary depending on the Web browser and webmail service used.



KEYWORDS

Computer forensics, webmail recovery, caching function, Web browser, data carving.

To return to the "Published Papers" main page, click here.