One of the first steps in any forensic examination should be to check the logs. In the __________ folder, you will find a subfolder named app profile. This will contain lists of recently opened applications as well as temporary data used by applications.
In computer science, the forensic examination is also known as a digital forensics field. This field used to include evidence found in computers and digital storage devices.
It is a software that checks the evidence and this software is installed in the computer system and all the files of this software are stored in local disk C.
Inside the app profile, there are var folder is available inside this folder another folder is found that is vm in this folder all data is stored.