Viewing the suspect data as they saw it can provide first responders & investigators valuable insight in a digital investigation. By showing what the desktop background was, how the icons were arranged, and what was in their favorites bar will visually impact the jury and give them a better perspective on the suspect’s intent.
Tom Cross is the Technical Manager at VFC (Virtual Forensic Computing). He has been at MD5, the company who makes VFC, and working in the digital forensics industry for 4 years.
Technical Manager, VFC