A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed visit these sites. However, the suspect has cleared the search history and emptied the cookie cache. Moreover, he has removed any images he might have downloaded. What can the investigator do to prove the violation? Choose the most feasible option.

Question

Accepted Answer

A. Image the disk and try to recover deleted files

Answer

B. Seek the help of co-workers who are eye-witnesses

Answer

C. Check the Windows registry for connection data (You may or may not recover)

Answer

D. Approach the websites for evidence

A suspect is accused of violating the acceptable use of computing resources, as he has visited adult websites and downloaded images. The investigator wants to demonstrate that the suspect did indeed…

Question

Options

How the community answered

Community Discussion