Examining the suspect's data as it originally appeared offers critical insights for first responders and investigators during a digital investigation. Presenting details such as the desktop background, icon organization, and contents of the favorites bar can significantly influence the jury by providing a clearer view of the suspect's intentions.
Tom Cross is the Technical Manager at VFC (Virtual Forensic Computing). He has been at MD5, the company who makes VFC, and working in the digital forensics industry for 4 years.
Technical Manager, VFC