URGENT Encase printer forensics without registry information

I want to find out printer history / files printed . I have a case file in EnCase, however there are no file registries available as all the drives are removable --> i.e i cannot find .spl or shadow files to determine the print history. Any ideas?

Posted Jun 3, 2025, 7:42 AM UTC

25
Loading comments…