The registry can provide evidentiary value to the digital forensic investigator as well in relation to web browser artifacts. Items such as passwords, default search provider and search engine, and the URLs typed into the web browser address bar are stored in the NTUSER.DAT file located within the NTUSER.DAT hive in the registry. Twenty five URLs can be stored at one time in the NTUSER.DAT file and they are cycled out as new URLs are typed into the web browser. The URLs are numbered from one to twenty five with the number one being the most recent website visited. …show more content…
Caylee’s body was found six months after she had disappeared which made it difficult to determine the cause of death. Apparently the Orange County sheriff’s office in Florida investigated Caylee Anthony’s death and overlooked the searches on the computer for methods involving suffocation. It was reported that it was not known who performed the search of the computer at the sheriff’s office but that the investigator had missed a Google search for fool-proof suffocation methods. The web browser search for fool-proof suffocation showed the user had misspelled the word as suffication. Further examination of the browser activity revealed the user had visited the social media website called Myspace which only Casey Anthony used. Reports state that the sheriff’s department found 17 vague searches from the Microsoft Internet Explorer web browser but they had not investigated any searches in the Mozilla Firefox web browser which was the web browser that Casey Anthony preferred using. The sheriff’s office did not contact the FBI for consultation when investigating this case and made the mistake of missing evidence of value located in the Mozilla Firefox web browser. Casey Anthony was acquitted of murdering her daughter in 2011