Examiners should also consider collecting the online evidence of social media accounts when the digital evidence is found on storage devices. Open source information is sometimes as important, if not more important, as electronic evidence on storage devices.
Windows 8.x Facebook and Twitter Metro App Artifacts - IFIP International Conference on Digital Forensics
OSINT: Advanced Twitter Searches - Cyber-forensics.ch
Social media, hiberfil.sys, pagefile.sys, browser, Internet
Get exclusive access to online courses and content through Patreon !