Extracting internet history

Internet history can be extracted from the WebCacheV01.dat file located at UsersDefAppsAPPDATALocalMicrosoftWindowsWebCache. Here is an example of a Windows 10 WebCacheV01.dat file:

The WebCacheV01.dat file in a Windows Phone

These files can be examined manually, for example, with a hex viewer, or can be parsed automatically with mobile forensic tools. Here is the WebCacheV01.dat file being parsed with Magnet AXIOM:

WebCacheV01.dat file parsed with Magnet AXIOM

With this, we've covered how to extract SMS, contacts, call, and internet history from a Windows Phone.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.135.190.232