I recently stumbled upon to great blog posts regarding Kindle forensics. Eric Huber’s ‘A Fistful of Dongles’ blog has some interesting initial analysis on imaging the Kindle and key artifacts to zone in on.
Part 1: A Cursory Look at Kindle Forensics
Part 2: Additional Thoughts on Kindle Forensics
Some interesting data Eric discovered:
- last book read w/ timestamp
- position in the book
- books loaded on device
- strings user has searched for
- *Remember with Kindle’s 3G ability you may want to use a Faraday bag