Reference no: EM133520641

Question: Identify and (thoroughly) discuss two specific Windows forensic artifacts (other than in the Registry) that would likely be found on Mr. Informant's assigned OOO workstation, which you believe could contain key evidence (related to the data leakage case scenario). Refer back to your Week 5 and Week 6 readings, if you are stumped! At a minimum, detail the names of the artifacts, the form and nature of the data they contain, where they would or could be found on Mr. Informant's workstation, and provide specific examples of information you might find in this case (given the scenario) via examination of those artifacts that would be potentially inculpatory (i.e., tending to incriminate the suspect or indicate he perpetrated the alleged actions - in this case, theft of intellectual property) or exculpatory (i.e., tending to support or indicate the subject did not perpetrate the alleged actions).