I recently stumbled upon to great blog posts regarding Kindle forensics. Eric Huber’s ‘A Fistful of Dongles’ blog has some interesting initial analysis on imaging the Kindle and key artifacts to zone in on.
Some interesting data Eric discovered:
- last book read w/ timestamp
- position in the book
- books loaded on device
- strings user has searched for
- *Remember with Kindle’s 3G ability you may want to use a Faraday bag