Web Activity (11) Chrome Firefox Opera Internet Explorer Edge Chrome Autofill Firefox History Opera Bookmarks Internet Explorer Cookies Edge Cache Chrome Cache Firefox Visits Opera Cache Internet Explorer Favorites Edge Cookies Chrome Cookies Firefox Downloads Opera Cookies Internet Explorer Cookie Records Edge Downloads Supported Windows Artifacts Chrome Current Session Firefox Bookmarks Opera Current Session Internet Explorer Main History Edge Favorites Chrome Current Tabs Firefox Cookies Opera Downloads Internet Explorer Daily History Edge History Chrome Downloads Firefox Cache2 Opera Extension Cookies Internet Explorer Weekly History Edge Dependency Entries Chrome Favicons Firefox Favicons Opera Favicons Internet Explorer Leak Records Edge Periodic History Chrome Shortcuts Firefox Form History Opera History Internet Explorer Cache Edge (Win Apps) Cache Chrome Last Session Firefox User Account Opera Last Session Internet Explorer PrivacIE Records Edge (Win Apps) Cookies Chrome Last Tabs Firefox Logins Opera Login Data Internet Explorer Redirect Records Edge (Win Apps) Downloads Operating System (19) Chrome Logins Firefox Input History Opera Thumbnails Internet Explorer Feedplat Records Edge (Win Apps) History Chrome Search Terms Firefox Last Session Opera Autofill Edge (Win Apps) Reading List Brave Chrome Top Sites Firefox Current Session Edge (Win Apps) Web Notes UC Brave Cookies Chrome Bookmarks Firefox Last Backup Link File Windows Event Logs Jumplist SRUM UC Autofill Brave Current Session Edge Chromium Chrome Visits Firefox Upgrade Backup UC Cache Brave Current Tabs Edge Chromium Collections USB Forensics Windows Event Logs (EVT) Jumplist Automatic Destinations SRUM Application Resource Usage Chrome History Firefox Add-ons UC Cookies Brave Last Session Edge Chromium Cookies Windows Event Logs (EVTX) Jumplist Custom Destinations SRUM Network Connections Prefetch Vivaldi Torch UC Current Session Brave Last Tabs Edge Chromium Current Session Windows Installed Services (EVTX) Windows 10 Notifications SRUM Network Usage Vivaldi Downloads Torch Cookies UC Current Tabs Brave Bookmarks Edge Chromium Current Tabs Windows Update Log Windows Task Scheduler Tasks (EVTX) Windows 10 Notifications Thumbnails SRUM Push Notification Data Vivaldi URLs Torch Current Session UC Downloads Brave Favicons Edge Chromium Last Session Thumbs DB Vivaldi Visits Torch Current Tabs UC Favicons Brave Downloads Edge Chromium Last Tabs Cortana Windows 10 Notifications Handler SRUM Energy Usage Long Term PowerShell Vivaldi Search Terms Torch Last Session UC Shortcuts Brave Visits Edge Chromium Bookmarks Cortana Place Reminders Windows 10 Notifications Handler Settings SRUM Energy Usage Vivaldi Current Session Torch Last Tabs UC Last Session Brave History Edge Chromium Favicons Shellbags Cortana Time Reminders Windows 10 Notifications BackedUp Info Task Scheduler Vivaldi Current Tabs Torch Bookmarks UC Last Tabs Brave Autofill Edge Chromium Downloads Windows Quick Access Cortana Person Reminders Windows Search Index Task Scheduler (job) Vivaldi Favicons Torch Favicons UC Logins Brave Logins Edge Chromium Visits Vivaldi Last Session Torch Downloads UC Search Terms Brave Shortcuts Edge Chromium History ThumbCache Windows Recycler Task Scheduler (xml) Vivaldi Last Tabs Torch Visits UC Top Sites Brave Top Sites Edge Chromium Autofill Windows 10 Timeline Windows Recycle Bin Vivaldi Top Sites Torch History UC Bookmarks Brave Search Terms Edge Chromium Logins Vivaldi Notes Torch Autofill UC Visits Brave Extensions Edge Chromium Shortcuts Vivaldi Bookmarks Torch Logins UC History Brave Extension Cookies Edge Chromium Top Sites Vivaldi Speed Dials Torch Shortcuts UC Browser Site Engagement Brave Site Engagement Edge Chromium Search Terms Torch Top Sites UC Autofill Profiles Brave Cache Edge Chromium Extensions Flash Cookies Instant Messaging (15) Torch Search Terms UC Credit Cards Brave Autofill Profiles Edge Chromium Extension Cookies Torch Extensions UC Omnibox Brave Credit Cards Edge Chromium Site Engagement Torch Extension Cookies Brave Ad Service Information Edge Chromium Cache Torch Site Engagement Brave Ad Payment Edge Chromium Credit Cards Skype ICQ Zoom Facebook Messenger Torch Cache Brave Publisher Information Edge Chromium Autofill Profiles Skype Accounts Pidgin Zoom Chat Messages Facebook Messenger Cached Images Torch Autofill Profiles Brave User Contributions Skype Calls Torch Credit Cards Brave Pending Contributions Messenger Plus! Zoom Sent/Received Files Facebook Messenger Messages Skype Contacts Brave Origin Information Table Zoom Call History Facebook Messenger Threads Skype Groups Paltalk Skype File Transfer AOL Instant Messenger Zoom Sessions Facebook Messenger Thread Participants Skype Text Messages mIRC Zoom Searches Facebook Messenger Contacted Users Skype Photo Messages ooVoo Zoom Contacts Facebook Messenger Cached Data Skype Contact Messages ooVoo File Properties Zoom Groups Facebook Messenger Text Messages Skype Video Messages Skype Voice Messages ooVoo Moments Zoom Meeting History Facebook Messenger Self Profile Peer-to-Peer (6) Antivirus (5) Firewall (2) Productivity (2) Archiving (2) Skype Location Messages ooVoo User Configuration Settings Zoom Meeting Messages Facebook Messenger Calls Skype Gif Messages ooVoo User Info Zoom User Accounts Facebook Messenger Shared Locations WinRAR Skype Other Events Avira ISA 2000 Evernote WhatsApp Zoom Subscription Requests Facebook Messenger Attachments BitComet Skype (Win Apps) Accounts WinRAR Last Archived MRU Avira Detected Threats ISA 2000 Firewall And Web Proxy Evernote Notes Skype (Win Apps) Calls WhatsApp Cache Zoom Active Devices FrostWire WinRAR Last Opened MRU Discord Avira Other Information ISA 2000 Packet Filter Evernote Logs Skype (Win Apps) Contacts WhatsApp Profile Pictures Zoom Action Logs eMule OneNote 7-Zip Skype (Win Apps) Groups Discord Messages Avast Windows Firewall Log WhatsApp Cookies Zoom Settings qBittorrent Skype (Win Apps) File Transfer Discord Calls 7-Zip Archived Files History IM+ Kaspersky Skype (Win Apps) Missed Calls BitTorrent 7-Zip Extract History Microsoft Messaging Discord Relationships Skype (Win Apps) Location Messages IM+ Accounts MalwareBytes Microsoft Messaging Calls Discord Viewed Accounts BitTorrent Added Torrents 7-Zip Folder History Skype (Win Apps) File Messages IM+ Contacts Nod32 BitTorrent Added Torrents Backup 7-Zip Working Folder Option Skype (Win Apps) Conversations Microsoft Messaging Chats IM+ Conversations BitTorrent Torrent Files Skype (Win Apps) Scheduled Calls Microsoft Messaging Contacts 7-Zip Copy History IM+ Messages Skype (Win Apps) Text Messages Microsoft Messaging Messages uTorrent 7-Zip Default Panels Path Skype (Win Apps) Photo Messages Viber PC Microsoft Messaging SMSes uTorrent Added Torrents Skype (Win Apps) Contact Messages Viber PC Calls Microsoft Messaging Transfers uTorrent Added Torrents Backup Skype (Win Apps) Video Messages Viber PC Chats uTorrent Torrent Files Skype (Win Apps) Audio Messages Microsoft Messaging Video Messages Viber PC Settings Skype (Win Apps) Voice Messages Microsoft Messaging Videos Skype (Win Apps) Profiles Cache Skype (Win Apps) Other Messages Skype (Win Apps) Local Files Skype (Win Apps) Alerts Skype (Win Apps) Emotions /forensafe /forensafe /forensafe Skype (Win Apps) Gif Messages Skype (Win Apps) Other Events https://www.forensafe.com [email protected] Supported Windows Artifacts Cloud (7) Registry (30) Builtin Apps (3) Web Server (2) Dropbox Google Drive iCloud Computer Name System Information Windows 10 Maps IIS Dropbox Cached Files Google Drive Preferences iCloud Photos Timeline Events Installed Programs Task Scheduler Windows 10 Maps Items IIS Microsoft Log iCloud Photos Shared Asset Comments IIS NCSA Log Dropbox Items Google Drive Items Internet Settings Logon Banner Windows 10 Maps Collections Dropbox Non Local Items Google Drive Device iCloud Local Paths Windows 10 Maps User Information IIS W3C Log Last Accessed Key UserAssist Dropbox Notifications Google Drive Pending Files iCloud Local Items Sticky Notes Apache Last Shutdown Windows Services iCloud Server Items Dropbox Recent Actions Google Drive Last Execution Date Windows Calendar Mapped Network Drive MRU Open Save MRU Dropbox Suggested Items Google Drive Sync iCloud Local Shared Documents Mapped Network Drives Last Visited MRU Dropbox Activity Google Drive Cloud Items iCloud Server Shared Documents Microsoft Management Console MRU User Accounts Dropbox Avatar Cache OneDrive iCloud Photos Album Assets Wireless Networks Dropbox Icons OneDrive Cloud Metadata iCloud Photos Shared Albums Paint MRU Dropbox (Win Apps) Actions OneDrive Sync Diagnostics Box Printers Information MUICache Database (1) Pagefile (1) Dropbox (Win Apps) Cached Items OneDrive User Configurations Box FS Nodes RecentDocs MRU AmCache Dropbox (Win Apps) Files OneDrive MountPoint Files Box Preferences Remote Desktop Connection MRU AmCache Application Files Dropbox (Win Apps) Folders OneDrive MountPoint Folders Box Local Items MySQL Log Page File URL's Run MRU AmCache Application Programs Dropbox (Win Apps) Starred Cached Items OneDrive Profile Service Box Items AmCache Driver Binaries Timezone Information Dropbox (Win Apps) Preview Items OneDrive State Box Local Events AmCache Pnp Devices Typed Paths Dropbox (Win Apps) Gallery Items OneDrive (Win Apps) Items Box Logs AmCache Driver Packages Typed URLs Dropbox (Win Apps) Recent Actions OneDrive (Win Apps) Deleted Items Box Sync AmCache Device Containers Profiles List pCloud OneDrive (Win Apps) RecycleBin Items Box