Windows 8.1, Ubuntu 14.04.1, Mac OS X 10.9.5, iOS 7.1.2, Android 4.4.4įorensic process for peer-to-peer (p2p) cloudĭirectory listings, plist file, log files, synced data, network data, IP address, URLs, memory analysis, browser dataįTK imager v3.2.0.0, Autopsy 3.1.1, Volatility 2.4, SQLite browser v3.4.0, Wireshark v1.10.1, plist explorer v1.0

Investigation model for cooperative storage cloud serviceĭirectory listings, record files, cache database, system log files, synced files, deleted files, thumbnail cache, browser artifacts, memory analysis, event logs, registry files, link files, network logsįTK imager v3.2.0.0, Autopsy 3.1.1, Volatility 2.4, SQLite browser v3.4.0, Wireshark v1.10.1, Browsing History View v1.60, plist explorer v1.0, Windows Event Viewer v1.0

Synced apps, application path, creation time, modification time, access time, MD5 hash valuesįorensic toolkit imager, VisualDiffer v.1.5.7 Windows system, MacBook system, iPhone, iPodĪpplication installation history, synced apps, plist, sync location

Wireshark for mac 10.9 download