CCleaner© – Is This Tool The End of Forensic Investigations As We Know it?

No ratings

Presented at TechnoSecurity&DigitalForensics 2019 by

Charles Giglia

The CCleaner website targets users wanting to “Speed up and Optimize” their PCs. CCleaner can delete internet history, cookies, caches, and temporary files. Among the destruction of Internet artifacts, it also can delete valuable forensic artifacts which are commonly used in digital investigations. CCleaner is able to delete Windows event logs, registry files, old prefetch data, shell items, and custom files and folders. Starting to be more commonly seen in cases for the purpose of data destruction, the use of CCleaner can have quite an impact on a forensic investigation. This session will help attendees determine if CCleaner was executed on a computer and what data you will see once these important artifacts have been deleted.