If there was Facebook usage where would an examiner expect to find these artifacts?

An Android device user is known to use Facebook to communicate with other parties under examination. There is no evidence of the Facebook application on the phone.

If there was Facebook usage where would an examiner expect to find these artifacts?
A . com.android.chrome/app_chrome/Default/Local Storage
B . dmappmgr.db
C . /data/system/packages.xml
D . AndroidManifest.xml

View Answer

Answer: B

Explanation:

Reference: https://www.ctsforensics.com/assets/news/35550_Web-update.pdf