I am doing a forensic investigation of a PC hard drive that was running end-point.
I am trying to show that a particular file was deleted, I have found an .idx file which I understand is a Norton file and it shows the file name that I am looking for within the .idx - my question is Does the .idx file show a file that was on the drive and scanned? here are the details
gcrc_v.idx
PreviewImageUrl1 l o c a l Ðÿÿÿvk X 8 Attendee List (22).xls1IØÿÿÿvk ˆR ClientGUID Url Øÿÿÿvk