Jad would be another person to speak to. He's the creator of ief by magnet forensics.
Also, a question I wanted to research but haven't found time is to try determine the last time someone used private browsing. I know ie for example will store the websites accessed but no times. Maybe the last write time of the file that info is stored will indicate the last time private browsing mode was activated.
↧