Busted! How Happy Accidents Thwart Data Thieves

... user experience or improve performance. Their probative value in court is just a happy accident. To illustrate, on Microsoft Windows systems, a forensic examiner may look to machine-generated artifacts - called LNK files, prefetch records, and ...

http://www.law.com/jsp/lawtechnologynews/PubArticleLTN.jsp?id=1202592920888