DagNasty
What can I say?
- Joined
- Aug 6, 2008
- Messages
- 59
- Reaction score
- 0
http://friends.myspace.com/index.cfm...r.viewfriends\ =203461948897ec12-9984-4944-b65e-
6dcef3d5a590=zenaida
Name: index.dat
Description: File, Archive
File Created: 06/12/08 11:15:29PM
Last Accessed: 06/12/08 11:15:29PM
Last Written: 07/16/08 04:20:12PM
Full Path: 08-069208\S013J10X237614\D\Documents and Settings\casey\Local Settings\Temporary Internet
Files\Content.IE5\index.dat
In red you see the file name and when that FILE (Index.dat) was created. It is part of the IE Content Folder ... this file contains information Internet Explorer data, such as "cookie" files. It contains much more data than the specific data found in these documents. So while the index.dat file was created on 6/12/08 that DOES NOT mean that this particular data, in this case the search for Zenaida, was performed on this date.
Snipped From CNet
"The fields Date Modified and Date Expires show the latest such date of any of the cookies, while Date Created shows the earliest such date of any of the cookies."
Sounds about right. The index.dat files in the content.ie5 folder is a sort of database for the cookies, temporary internet files and autocomplete if it is enabled. The creation date of 6/12/08 is when the file was actually created on the first start of Internet Explorer. That to me sounds like that she may have deleted her history/temp files prior to that date. The last written date of 7/16 could be the forensic tool accessing it as I believe that was when they brought the PC in although it wasn't quite clear