@ athulin Thank you very much for your detailed post. It all made logical sense to me and now allows me to think in a different way to understanding the problem
@jaclaz thank you for fixing the malformed link it was late last night and was in bed when i replied first and had a very busy day today with practical investigations and interview techniques so never got a chance to fix it. Regarding the software i was using, yes i do apolagise, i normally crop photos because i am not a fan of posting on a forum and having large images attached to the post, but in this case i see now the more data available the easier it is to assess how best to answer questions, in this case i was using X-Ways Forensics for the second image, and the first image came from the inbuilt registry viewer from X-Ways.
↧