VS Code

Forensic Value:

Recovery history of old version of files.

File Location:

• Windows:

  • C:/Users/USER/AppData/Roaming/Code/User/History

• Linux:

  • /home/USER/.config/Code/User/History

Parse Data:

Considerations:

Example:

Analysis Tips:

Anti-Forensics: