Talk With an Expert

Tor Browser Artifacts in Windows 10

Tor Browser Artifacts in Windows 10 (PDF, 3.45MB)Published: 24 Feb, 2017
Created by:
Aron Warren

The Tor network is a popular, encrypted, worldwide, anonymizing virtual network in existence since 2002 and is used by all facets of society such as privacy advocates, journalists, governments, and criminals. This paper will provide a forensic analysis of the Tor Browser version 5 client on a Windows 10 host for an individual or group interested in remnants left by the software. This paper will utilize various free and commercial tools to provide a detailed analysis of filesystem artifacts as well as a comparison between pre- and post- connection to the Tor network using memory analysis.