Google Community - View Single Post

dlr · 05-15-2008, 05:40 AM

I'm conducting a forensic analysis of a Windows XP computer used for inappropriate activity. In the user profile, under "Application Data - Google - Local Search History", there are 5 files containing the keywords used for searches in each category. The dates I see for these files are 2 months in the past. I know from the IE history logs that the user has searched for keywords in the last couple of weeks but the file dates have not changed. The keywords are not added to the end of the list of those already searched for in the past. Google toolbar is installed and AutoComplete is on.

Any ideas or explanations?
Thanks

05-15-2008, 05:40 AM	#1 (permalink)
dlr Noogle Join Date: May 2008 Posts: 1 Thanks: 0 Thanked 0 Times in 0 Posts	Local Search History I'm conducting a forensic analysis of a Windows XP computer used for inappropriate activity. In the user profile, under "Application Data - Google - Local Search History", there are 5 files containing the keywords used for searches in each category. The dates I see for these files are 2 months in the past. I know from the IE history logs that the user has searched for keywords in the last couple of weeks but the file dates have not changed. The keywords are not added to the end of the list of those already searched for in the past. Google toolbar is installed and AutoComplete is on. Any ideas or explanations? Thanks