I have been given a drive from a failed PC, and asked to investigate as much as possible the last user login, audit trail, and if possible pages visited in IE.
To get access to the drive, I have mounted it as an external drive and now have access to the "failed" device.
My question is where would I find the:
the last user login,
audit trail of data worked on
and if possible pages visited in IE.
Looking for as much info to check this out.
Many thanks in advance.