I have a case where IEF was used to examine a computer but unfortunately at this time I do not own IEF.
What criteria does IEF use to carve out Facebook pictures?
When reading the IEF report it appears that the link(s) IEF is referring to are temporary internet cache links.
I guess my question would be, How does IEF determine that any particular link contains a Facebook image?
Thanks, and have a happy and safe 4th of July weekend.
Larry
↧