D.rar | Erin

: Pinpointing exactly when the sensitive "Project X" file was copied to the USB.

: Frequently found using Steganography tools or by checking alternate data streams (ADS).

: If an Outlook PST file is present, investigators look for communications with "competitors" or external email addresses where company secrets might have been sent. Common Solutions (Flags)