Browser Artifacts

Web browsers create a number of artifacts that can be of interest to an investigator during the triage state of an investigation and later on during the formal lab investigation. While different browser applications vary, they all create cookies, caches, and other temporary internet files that can contain a wealth of information about the history of a suspects online activities. Searching these files can be very beneficial to an investigation but can also take a lot of time. Applications like MacLockPick II can significantly cut down on the time required to analyze these files and find relative evidence to the investigation.