In Parts 1 and  2 of this series on the Windows Activity Timeline (just “Timeline” from here on out) we discussed how Cellebrite Inspector and Cellebrite Digital Collector can help investigators find valuable evidence on either Android or Mac devices respectively. We also took a deeper dive into the source database, ActivitiesCache.db, which stores reams of data about … Continue reading Exploring the Windows Activity Timeline, Part 3: The Value of Clipboard Content