Two Thumbs Up - Thumbnail Forensics

Good morning!


It's time for a new 13Cubed episode. In this one, we'll look at Thumbs.db and Thumbcache -- databases used by Windows to store thumbnails (preview images) of pictures, documents, and other file types. Learn how these rather obscure artifacts could potentially be invaluable to your investigations.


Episode:
[https://www.youtube.com/watch?v=5efCp1VXhfQ](https://www.youtube.com/watch?v=5efCp1VXhfQ)


For a complete 13Cubed Episode Guide, check out [13cubed.com/episodes](http://13cubed.com/episodes).


**Check out the first official 13Cubed Training Course at** [**training.13cubed.com**](http://training.13cubed.com/) **-- now with hands-on practice and a Certification / Digital Badge!**

artifacts computerforensics databases documents file forensics images investigations learn pictures preview store thumbnail types windows