In a recent case utilising existing digital forensic software, images were identified as Indecent Images of Children (IIOC). The forensic software enabled the extraction and analysis of metadata from the images, however, vital information such as creation dates, geolocation data, and device information, were not contained within the files.
This meant crucial context and evidence linking the images to specific activities and individuals was missing.
The files were identified in the path:
“C:\Users\{USER_ACCOUNT}\AppData\Local\Packages\Microsoft.ZuneMusic_#########\LocalCache\Image”
This location is associated with the Microsoft Groove Music app, which was previously known as Zune Music. This directory is part of the app's local cache and is used to store various image files related to the app's functionality.
...
Read More