Tor Browser Bundle leave "traces" on Mac OS X
If Tor Browser Bundle is expected to be forensic proof, on Mac OS X it does leave very specific trace on the user profile.
A directory is created in "$USER/Library/Saved Application State/org.mozilla.torbrowser.savedState/" .
This is a proof that the user has executed (and when) tbb
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information