We have got a forensics replica of a windows 7 laptop, and need to determine what kind of websites a user has been browsing (in both IE and Chrome). Our IT section has created a copy of the drive using FTK Imager, but I am interested:
1) what locations/files can be pulled from the drive image to give clues on internet usage
2) what free tools can analyse these files/folders to get a management friendly report of the sort of websites they have been browsing?
3) As a general rule, how long will the history go back for in either browser. We are not 100% at this stage the exact version of each browser.
4) is there anyway to determine/get a report of all networks the device has been attached too (both wired and wireless), in the past 30 days, including dates/times.
laptop will have been running win7 enterprise if that assists with suggesting files/folders/tools to use - for analysis.