Web Activity (11)

Chrome Explorer Edge Chrome Autofill Firefox History Opera Bookmarks Cookies Edge Cache Chrome Cache Firefox Visits Opera Cache Internet Explorer Favorites Edge Cookies Chrome Cookies Firefox Downloads Opera Cookies Internet Explorer Cookie Records Edge Downloads Supported Windows Artifacts Chrome Current Session Firefox Bookmarks Opera Current Session Internet Explorer Main History Edge Favorites Chrome Current Tabs Firefox Cookies Opera Downloads Internet Explorer Daily History Edge History Chrome Downloads Firefox Cache2 Opera Extension Cookies Internet Explorer Weekly History Edge Dependency Entries Chrome Firefox Favicons Opera Favicons Internet Explorer Leak Records Edge Periodic History Chrome Shortcuts Firefox Form History Opera History Internet Explorer Cache Edge (Win Apps) Cache Chrome Last Session Firefox User Account Opera Last Session Internet Explorer PrivacIE Records Edge (Win Apps) Cookies Chrome Last Tabs Firefox Logins Opera Login Data Internet Explorer Redirect Records Edge (Win Apps) Downloads (19) Chrome Logins Firefox Input History Opera Thumbnails Internet Explorer Feedplat Records Edge (Win Apps) History Chrome Search Terms Firefox Last Session Opera Autofill Edge (Win Apps) Reading List Chrome Top Sites Firefox Current Session Edge (Win Apps) Web Notes UC Brave Cookies Chrome Bookmarks Firefox Last Backup Link File Windows Event Logs Jumplist SRUM UC Autofill Brave Current Session Edge Chrome Visits Firefox Upgrade Backup UC Cache Brave Current Tabs Edge Chromium Collections USB Forensics Windows Event Logs (EVT) Jumplist Automatic Destinations SRUM Application Resource Usage Chrome History Firefox Add-ons UC Cookies Brave Last Session Edge Chromium Cookies Windows Event Logs (EVTX) Jumplist Custom Destinations SRUM Network Connections Prefetch Torch UC Current Session Brave Last Tabs Edge Chromium Current Session Windows Installed Services (EVTX) Notifications SRUM Network Usage Vivaldi Downloads Torch Cookies UC Current Tabs Brave Bookmarks Edge Chromium Current Tabs Log Tasks (EVTX) Windows 10 Notifications Thumbnails SRUM Push Notification Data Vivaldi URLs Torch Current Session UC Downloads Brave Favicons Edge Chromium Last Session Thumbs DB Vivaldi Visits Torch Current Tabs UC Favicons Brave Downloads Edge Chromium Last Tabs Windows 10 Notifications Handler SRUM Energy Usage Long Term PowerShell Vivaldi Search Terms Torch Last Session UC Shortcuts Brave Visits Edge Chromium Bookmarks Cortana Place Reminders Windows 10 Notifications Handler SRUM Energy Usage Vivaldi Current Session Torch Last Tabs UC Last Session Brave History Edge Chromium Favicons Shellbags Cortana Time Reminders Windows 10 Notifications BackedUp Info Task Scheduler Vivaldi Current Tabs Torch Bookmarks UC Last Tabs Brave Autofill Edge Chromium Downloads Windows Quick Access Cortana Person Reminders Index Task Scheduler (job) Vivaldi Favicons Torch Favicons UC Logins Brave Logins Edge Chromium Visits Vivaldi Last Session Torch Downloads UC Search Terms Brave Shortcuts Edge Chromium History ThumbCache Windows Recycler Task Scheduler () Vivaldi Last Tabs Torch Visits UC Top Sites Brave Top Sites Edge Chromium Autofill Windows 10 Timeline Windows Recycle Bin Vivaldi Top Sites Torch History UC Bookmarks Brave Search Terms Edge Chromium Logins Vivaldi Notes Torch Autofill UC Visits Brave Extensions Edge Chromium Shortcuts Vivaldi Bookmarks Torch Logins UC History Brave Extension Cookies Edge Chromium Top Sites Vivaldi Speed Dials Torch Shortcuts UC Browser Site Engagement Brave Site Engagement Edge Chromium Search Terms Torch Top Sites UC Autofill Profiles Brave Cache Edge Chromium Extensions Flash Cookies (15) Torch Search Terms UC Credit Cards Brave Autofill Profiles Edge Chromium Extension Cookies Torch Extensions UC Omnibox Brave Credit Cards Edge Chromium Site Engagement Torch Extension Cookies Brave Ad Service Information Edge Chromium Cache Torch Site Engagement Brave Ad Payment Edge Chromium Credit Cards ICQ Zoom Messenger Torch Cache Brave Publisher Information Edge Chromium Autofill Profiles Skype Accounts Pidgin Zoom Chat Messages Facebook Messenger Cached Images Torch Autofill Profiles Brave User Contributions Skype Calls Torch Credit Cards Brave Pending Contributions Messenger Plus! Zoom Sent/Received Files Facebook Messenger Messages Skype Contacts Brave Origin Information Table Zoom Call History Facebook Messenger Threads Skype Groups Paltalk Skype File Transfer AOL Instant Messenger Zoom Sessions Facebook Messenger Thread Participants

Skype Text Messages mIRC Zoom Searches Facebook Messenger Contacted Users Skype Photo Messages ooVoo Zoom Contacts Facebook Messenger Cached Data Skype Contact Messages ooVoo File Properties Zoom Groups Facebook Messenger Text Messages Skype Video Messages Skype Voice Messages ooVoo Moments Zoom Meeting History Facebook Messenger Self Profile Peer-to-Peer (6) Antivirus (5) Firewall (2) Productivity (2) Archiving (2) Skype Location Messages ooVoo User Configuration Settings Zoom Meeting Messages Facebook Messenger Calls Skype Gif Messages ooVoo User Info Zoom User Accounts Facebook Messenger Shared Locations WinRAR Skype Other Events Avira ISA 2000 Evernote WhatsApp Zoom Subscription Requests Facebook Messenger Attachments BitComet Skype (Win Apps) Accounts WinRAR Last Archived MRU Avira Detected Threats ISA 2000 Firewall And Web Proxy Evernote Notes Skype (Win Apps) Calls WhatsApp Cache Zoom Active Devices FrostWire WinRAR Last Opened MRU Discord Avira Other Information ISA 2000 Packet Filter Evernote Logs Skype (Win Apps) Contacts WhatsApp Profile Pictures Zoom Action Logs eMule OneNote 7-Zip Skype (Win Apps) Groups Discord Messages Avast Log WhatsApp Cookies Zoom Settings qBittorrent Skype (Win Apps) File Transfer Discord Calls 7-Zip Archived Files History IM+ Kaspersky Skype (Win Apps) Missed Calls BitTorrent Messaging Discord Relationships 7-Zip Extract History Skype (Win Apps) Location Messages IM+ Accounts MalwareBytes Microsoft Messaging Calls Discord Viewed Accounts BitTorrent Added Torrents 7-Zip Folder History Skype (Win Apps) File Messages IM+ Contacts Nod32 BitTorrent Added Torrents Backup 7-Zip Working Folder Option Skype (Win Apps) Conversations Microsoft Messaging Chats IM+ Conversations BitTorrent Torrent Files Skype (Win Apps) Scheduled Calls Microsoft Messaging Contacts 7-Zip Copy History IM+ Messages Skype (Win Apps) Text Messages Microsoft Messaging Messages uTorrent 7-Zip Default Panels Path

Skype (Win Apps) Photo Messages Viber PC Microsoft Messaging SMSes uTorrent Added Torrents Skype (Win Apps) Contact Messages Viber PC Calls Microsoft Messaging Transfers uTorrent Added Torrents Backup Skype (Win Apps) Video Messages Viber PC Chats uTorrent Torrent Files Skype (Win Apps) Audio Messages Microsoft Messaging Video Messages Viber PC Settings Skype (Win Apps) Voice Messages Microsoft Messaging Videos Skype (Win Apps) Profiles Cache Skype (Win Apps) Other Messages Skype (Win Apps) Local Files Skype (Win Apps) Alerts Skype (Win Apps) Emotions /forensafe /forensafe /forensafe Skype (Win Apps) Gif Messages Skype (Win Apps) Other Events ://www.forensafe.com [email protected] Supported Windows Artifacts

Cloud (7) Registry (30) Builtin Apps (3) Web (2)

Dropbox Google Drive iCloud Computer Name System Information Windows 10 Maps IIS

Dropbox Cached Files Google Drive Preferences iCloud Photos Timeline Events Installed Programs Task Scheduler Windows 10 Maps Items IIS Microsoft Log

iCloud Photos Shared Asset Comments IIS NCSA Log Dropbox Items Google Drive Items Internet Settings Logon Banner Windows 10 Maps Collections Dropbox Non Local Items Google Drive Device iCloud Local Paths Windows 10 Maps User Information IIS W3C Log Last Accessed Key UserAssist Dropbox Notifications Google Drive Pending Files iCloud Local Items Apache Last Shutdown Windows Services iCloud Server Items Dropbox Recent Actions Google Drive Last Execution Date Windows Mapped Network Drive MRU Open Save MRU Dropbox Suggested Items Google Drive Sync iCloud Local Shared Documents Mapped Network Drives Last Visited MRU Dropbox Activity Google Drive Cloud Items iCloud Server Shared Documents Microsoft Management Console MRU User Accounts Dropbox Avatar Cache OneDrive iCloud Photos Album Assets Wireless Networks Dropbox Icons OneDrive Cloud Metadata iCloud Photos Shared Albums Paint MRU

Dropbox (Win Apps) Actions OneDrive Sync Diagnostics Box Printers Information MUICache Database (1) Pagefile (1) Dropbox (Win Apps) Cached Items OneDrive User Configurations Box FS Nodes RecentDocs MRU AmCache

Dropbox (Win Apps) Files OneDrive MountPoint Files Box Preferences Remote Desktop Connection MRU AmCache Application Files Dropbox (Win Apps) Folders OneDrive MountPoint Folders Box Local Items MySQL Log Page File URL's Run MRU AmCache Application Programs Dropbox (Win Apps) Starred Cached Items OneDrive Profile Service Box Items AmCache Driver Binaries Timezone Information Dropbox (Win Apps) Preview Items OneDrive State Box Local Events AmCache Pnp Devices Typed Paths Dropbox (Win Apps) Gallery Items OneDrive (Win Apps) Items Box Logs AmCache Driver Packages Typed URLs Dropbox (Win Apps) Recent Actions OneDrive (Win Apps) Deleted Items Box Sync AmCache Device Containers Profiles List pCloud OneDrive (Win Apps) RecycleBin Items Box Sync Preferences AmCache Application Shortcuts Virtualization (1) (2) Searched Strings OneDrive (Win Apps) Accounts Box Sync Local Items AmCache Files

OneDrive (Win Apps) Downloads Search History Box Sync Items AmCache Programs VMWare Windows LogFile Box Sync Logs VMWare Configurations FTK Imager Directory Listing VMWare Events

Media (1) Social Media (2) Win Apps (3) (3) Remote Access (2) Memory (1) Router (1)

Processes List CISCO Syslog VLC Media Player Twitter Windows Photos Thunderbird AnyDesk VLC Media Player Watched Videos Twitter Loaded Tweets Windows Photos Items Thunderbird Addressbook AnyDesk Actions Log VLC Media Player Audio Files Twitter Loaded Users Windows Photos Album Thunderbird Bookmarks AnyDesk Thumbnails VLC Media Player Recently Played Files Facebook Windows Photos Collection Thunderbird DB Email AnyDesk Chat Sessions Facebook Friends Windows Photos Thunderbird Cookies AnyDesk User Configurations Facebook Contacts Windows Photos Folders Thunderbird MBOX Email AnyDesk Session Recordings PDF Reader Thunderbird Favicons AnyDesk Unattended Session Password

Thunderbird Places Windows Terminal AnyDesk Connections Trace

Outlook AnyDesk Services Log PST/OST Teamviewer Outlook PST/OST TeamViewer Log File Documentation (3) Outlook MSG TeamViewer Connections DBX TeamViewer Incoming Connections Adobe Acrobat Microsoft Office Foxit Reader

Adobe Acrobat Recent Files Microsoft Office Recent Places Foxit Reader General Information

Adobe Acrobat Recent Locations Microsoft Office Recent Files Foxit Reader Commented Files

Adobe Acrobat General Info Microsoft Office Word Reading Locations Foxit Reader Recent Files

Adobe Acrobat Favorite Files Foxit Reader Recent Folders

Adobe Acrobat User Information Foxit Reader Last Opened Files /forensafe /forensafe /forensafe

https://www.forensafe.com [email protected]