History Extractor took a short time to complete and created a Index.dat file that contained about 500 records. I then opened the Index.dat file using Net Analysis and was able to view the History entries.
Monday, April 27, 2009
F-Response and History Extractor
Following on from the previous posting I thought I would try locating web history from the RAM of a running machine. Again using VMware I connected to the RAM using F-Response and ran Craig Wilson's History Extractor against the running RAM.
History Extractor took a short time to complete and created a Index.dat file that contained about 500 records. I then opened the Index.dat file using Net Analysis and was able to view the History entries.
History Extractor took a short time to complete and created a Index.dat file that contained about 500 records. I then opened the Index.dat file using Net Analysis and was able to view the History entries.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment