Thumbcache Images – An Overview Thumbcache files are database files that are automatically generated by the Microsoft Windows operating system from Windows Vista onwards within the ‘hidden’ system directory located at the path \Users\[User Profile Name]\AppData\Local\Microsoft\Windows\Explorer\. How are Thumbcache Images Stored? Images within the Thumbcache files are automatically stored when a folder on the computer […]
File Slack Space
What is File Slack Space? File slack space occurs when a smaller file overwrites a larger one. File Slack space is the difference between the logical end of the file and the physical end of the area containing the file. A simple comparison would be when a one-hour film overwrites a two-hour film on a […]
Unallocated Clusters
Unallocated Clusters – An Overview Unallocated Clusters are areas of deleted data that have lost allocation within the file system. When files are deleted from a computer or storage device, the data forming that file is not physically removed from the drive, instead, the entry within the Master File Table is altered to remove the […]
System Volume Information
System Volume Information – An Overview System Volume Information consists of a ‘hidden’ Windows system directory that contains a backup within shadow copy files of the user and system stored files. The Microsoft Windows operating system automatically stores a backup of files present on the hard drive and places these files within a ‘hidden’ and […]
John McAfee and the EXIF Photograph Metadata
Why Police Sought to Arrest John McAfee In December 2012, John McAfee, who had famously built and sold his McAfee antivirus company in 1996, was wanted by Police in his country of residence, Belize as a person of interest in connection with the murder of his neighbour, Gregory Viant Faull who was found dead of […]
