thecoop

Q: Pii in my .Spotlight-V100 Store V2 cache? Problem ?

I'm told the .txt files with Pii in the cache is irrelevant and we need to exclude .Spotlight-V100 from our Pii searches and turn off Spotlight. I think that is wrong. The OS needs Spotlight to run efficiently and the Pii is a valid concern and .Spotlight-V100 should be included in scans for Pii.

 

Can someone give me an in depth overview of the .Spotlight-V100 folder and the data ( .txt's) in the Store V2 cache. I've read that caches are used in forensics often because no one knows to delete them and data for real evidence is found there.

 

Thank you

Posted on Feb 2, 2016 8:27 AM