...
With further visits to the same web site, the HOST entry remains unchanged. Examining the entries for the Daily INDEX.DAT will show when a web site was first and last visited during the period. Figure 1 below shows an example of this when using the HOST filter view for visits to the Digital Detective web site:
Figure 1
Daily INDEX.DAT Timestamps
...
- Establishing the Time Zone SettingsIdentification of Time Zone settings Settings on suspect computerSuspect Computer
The calculated ActiveBias information is represented in NetAnalysis by the ActiveBias column as shown in figure 2:
Figure 2
NetAnalysis further uses this information to confirm the selected Time Zone is correct.
...
The calculated ActiveBias is logged to the Audit Log as shown in Figure 3:
Figure 3
If NetAnalysis detects that the Time Zone settings for the forensic investigation are not correct, a warning dialogue will be shown immediately after the data has been imported. Figure 4 shows the warning dialogue:
Figure 4
| Tip |
|---|
Examination of the ActiveBias column will show which entries are in conflict with the Time Zone Settings. |
...