Daily Blog #77: Sunday Funday 9/7/13 - Detecting Dropbox Activity Challenge

Detecting Dropbox Activity Challenge

Hello Reader,

           It's that time again, Sunday Funday time! For those not familiar every Sunday I throw down the forensic gauntlet by asking a tough question. To the winner go the accolades of their peers and prizes hopefully worth the time they put into their answer. This week I am changing things up and letting the winner pick their choice of prizes!

The Prize:

The Rules:
  1. You must post your answer before Midnight PST (GMT -7)
  2. The most complete answer wins
  3. You are allowed to edit your answer after posting
  4. If two answers are too similar for one to win, the one with the earlier posting time wins
  5. Be specific and be thoughtful 
  6. Anonymous entries are allowed, please email them to dcowen@g-cpartners.com
  7. In order for an anonymous winner to receive a prize they must give their name to me, but i will not release it in a blog post

The Challenge:

Your suspect had a corporate laptop running Windows 7 and had a company dropbox account how would you determine the following:

1. What information was synced to dropbox.

2. What information was deleted from his local dropbox sync folders.

3. What account is associated with the dropbox .

4. When the dropbox account was deleted.

Good luck!

Post a Comment