Two Thumbs Up - Thumbnail Forensics

In this episode, we'll look at Thumbs.db and Thumbcache -- databases used by Windows to store thumbnails (preview images) of pictures, documents, and other file types. Learn how these rather obscure artifacts could potentially be invaluable to your investigations.

*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***

📖 Chapters

00:00 - Intro
02:28 - Thumbs.db / Thumbcache artiFACTS
05:13 - Thumbcache Viewer Demo

🛠 Resources

#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics

artifacts computerforensics databases demo dfir digitalforensics documents file forensics images investigations learn patreon pictures preview resources store thumbnail types video viewer windows