You work as a professional Computer Hacking Forensic Investigator for DataEnet Inc. You want to investigate e-mail information of an employee of the company. The suspected employee is using an…

Question

Options

• AHistory folder
• BTemporary Internet Folder
• CCookies folder
• DDownload folder

• A
  86% (30)
• D
  14% (5)

Explanation

When a user accesses web-based email (Hotmail, Yahoo) through a browser, the browser automatically stores forensic artifacts across three key local locations. The History folder logs URLs and timestamps showing when and which email accounts were accessed. The Temporary Internet Files (cache) folder stores actual page content, including rendered email messages and attachments previewed in the browser. The Cookies folder holds session tokens, authentication data, and service identifiers that prove the user logged into specific email providers.

The Download folder (D) is the distractor - while a user might save email attachments there, it is not email-specific; it stores any file downloaded from any source, making it unreliable as a primary indicator of web email activity.

Memory tip: Think of the browser's "automatic witnesses" - History (when/where), Cache (what was seen), Cookies (who was authenticated). These three record web email activity without the user doing anything intentional, unlike the Download folder, which requires a deliberate save action.

No community discussion yet for this question.