data leakage case #40, #41 sticky notes
Forensic/CFReDS-Data Leakage Case2019. 1. 24. 08:55
https://www.cfreds.nist.gov/data_leakage_case/data-leakage-case.html
#40. Where are Sticky Note files located?
\Users\informant\AppData\Roaming\Microsoft\Sticky Notes\StickyNotes.snt
#41. Identify notes stored in the Sticky Note file.
WinHex 를 통해 해당 경로의 StickyNotes.snt 파일을 추출한 뒤, Structured Storage Viewer 를 통해 내용을 확인한다.
[프로그램 다운로드 링크] https://www.mitec.cz/ssv.html
'Forensic > CFReDS-Data Leakage Case' 카테고리의 다른 글
| data leakage case #47~50, Volume Shadow Copies(VSC) (0) | 2019.01.30 |
|---|---|
| data leakage case #42~46, Windows Search Database, windows.edb (0) | 2019.01.24 |
| data leakage case #38, #39, Thumbcache (0) | 2019.01.24 |
| data leakage case #37, print forensic (0) | 2019.01.24 |
| data leakage case #36, DOCX file searching (0) | 2019.01.24 |
