Internet Explorer History Utilities
January 23, 2005 4:08 PM Subscribe
What utilities have you used to examine I.E. history?
I've tried a few but, none are really great. This is for a legal matter involving an employee who was, big surprise, browsing stuff he shouldn't have been. It's a winxp machine and I know where the index.dat files are, I know that there is a rather complicated cache system. I also know that there should be something out there that will do the index.dat as well as give listings of websites visited and be able to examine the html and graphics left behind. I can do it by hand but, the job won't allow much time to create the report.
I've tried a few but, none are really great. This is for a legal matter involving an employee who was, big surprise, browsing stuff he shouldn't have been. It's a winxp machine and I know where the index.dat files are, I know that there is a rather complicated cache system. I also know that there should be something out there that will do the index.dat as well as give listings of websites visited and be able to examine the html and graphics left behind. I can do it by hand but, the job won't allow much time to create the report.
EnCase Forensic is what I use when examining a PC. It's also what most of the world's computer crime and forensic workers use. It's probably overkill for what you need, though. :)
posted by Jairus at 6:46 PM on January 23, 2005
posted by Jairus at 6:46 PM on January 23, 2005
Response by poster: Thank ajr, that one I hadn't found... I like it.
Jairus, EnCase probably is overkill but, I wish I had a copy just the same. I was really just wondering if there were other neat tools that I was missing. I'm following the development F.I.R.E. for some things. It's not quite there yet but, it's coming along pretty nicely. Sadly the project seems dormant for the time being.
posted by Dean_Paxton at 9:45 PM on January 23, 2005
Jairus, EnCase probably is overkill but, I wish I had a copy just the same. I was really just wondering if there were other neat tools that I was missing. I'm following the development F.I.R.E. for some things. It's not quite there yet but, it's coming along pretty nicely. Sadly the project seems dormant for the time being.
posted by Dean_Paxton at 9:45 PM on January 23, 2005
This thread is closed to new comments.
posted by ajr at 6:42 PM on January 23, 2005