Often Overlooked but Beneficial Artifacts

Any information that allows an investigator to paint a better picture of a suspects activities can be beneficial to an investigation. The clipboard can often contain contents showing what a suspect was recently doing on their system. A screen shot of the suspect system in it's current state of the machine when investigators first came in contact with the system. MacLockPick II can capture both of these items for later examination.