Comments on: Computer Forensics : Hacking Case using Autopsy https://www.forensicxs.com/computer-forensics-hacking-case-using-autopsy/ Ethical Hacking | Cybersecurity Sun, 23 Mar 2025 19:40:24 +0000 hourly 1 By: Christian Leomar De Jesus https://www.forensicxs.com/computer-forensics-hacking-case-using-autopsy/#comment-11682 Sun, 23 Mar 2025 19:40:24 +0000 https://www.forensicxs.com/?p=833#comment-11682 For Question 19: I used Autopsy and used a Keyword Search for the NNTP ‘news.dallas.sbcglobal.net’ and got 4 results. 2 of them can be removed since they were never modified or accessed. The other two related to programs would be one that you already found NTUSER.DAT and the other would be AGENT.INI. From the location address we can see that AGENT.INI is in vol_vol2/Program Files/Agent/Data/AGENT.INI

]]> By: Forensicxs https://www.forensicxs.com/computer-forensics-hacking-case-using-autopsy/#comment-250 Thu, 13 May 2021 16:59:35 +0000 https://www.forensicxs.com/?p=833#comment-250 In reply to Mario.

Hi Mario, thanks a lot for your kind message 🙂

]]> By: Mario https://www.forensicxs.com/computer-forensics-hacking-case-using-autopsy/#comment-249 Thu, 13 May 2021 00:21:45 +0000 https://www.forensicxs.com/?p=833#comment-249 Excellent article.

It was a great help to me, and nothing to say about the additional note, thank you very much for developing it.

]]>