Passwords in notepad

Accounts in txt files

How to find stored credentials on disk using Autopsy. Helpfull when you need to prove that user is not using some kind of password safe.

Keyword search

Some keywords example:

  • Password, pass
  • User, login
  • Account
  • Activation link
  • Regex for login (name.surname, n.surname)
  • Regex for complex passowrd
You can find dictionary here