If you run a search on Google.com, your Internet search is likely recorded and logged in several places. Digital forensic examiners leverage this feature in digital forensic exams. Investigators can serve Google with the appropriate legal paperwork to determine a specific users searches while they were logged into Google. The latter is hard to obtain and the former is a standard …
Google offers new data source to digital forensic examiners
Google launched its new offline version of Gmail/Calendar/Docs. This means that examiners might be able to recover a local copy of Gmail artifacts easier. I look forward to see some research on this. Perhaps I can find a student or 10 to do some research in the next few weeks. Here is a direct link to the Offline Google Gmail …