±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36775
New Yesterday: 0 Visitors: 139

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Beta Test - Forensic Internet Explorer

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

zyborski
Member
 

Beta Test - Forensic Internet Explorer

Post Posted: Oct 25, 05 00:11

Hello everyone!

I am currently into my final year of a Forensic Computing MSc.

As part of this dissertation, I am writing a software tool designed to reconstruct web pages from the Microsoft Internet Explorer Temporary Internet Cache.

A taster of the software can be found at: Fix Screen Shots

The software will (subject to successful testing) be made available free of charge to all forensic investigators upon completion of my dissertation.

I am currently looking for willing beta testers for the software tool which is approaching its final build.

If anybody is willing to participate in the program (which I anticipate will last for about 4-6 weeks), then please email me at: [email protected], stating your name, organisation and contact details.

The beta test will be done via web based feedback and by the participants completing a beta test form, which will be made available in the next few weeks.


Thanks in advance

Paul Slater  
 
  

Jonathan
Senior Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Oct 25, 05 13:28

Looks like an interesting project Paul - have emailed you with my details.
_________________
Forensic Control
twitter.com/ForensicControl
St Bride Foundation, 14 Bride Lane, London, EC4Y 8EQ 
 
  

keydet89
Senior Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Oct 25, 05 15:17

Paul,

How does your project differ from already existing tools?

Thanks,

H. Carvey
"Windows Forensics and Incident Recovery"
www.windows-ir.com
windowsir.blogspot.com  
 
  

zyborski
Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Oct 26, 05 02:07

Hi,

Most tools that are available for analysing the contents of the Microsoft Internet Explorer Cache, do so by presenting the results to the user in a 'tabular' layout. The emphasis is on the web objects, times and dates, etc.
I am only aware of one tool that actually attempts to allow the user to 'see' the actual contents of the web page to which the decoded objects refer, howver the decoding appears secondary to the main function of the tool, and it is not easy to see and follow a users browsing history.

Where my tool differs is that it is designed to reconstruct web pages. It parses the cache, and presents the results to the user using a similar 'look and feel' as Microsoft Internet Explorer. It allows the user to sort the results on date, site or frequency, and will attempt to reconstruct each page upon request.

If an investigator finds a page of potential relevance, they can switch views to a more traditional table form, and see the web objects together will all associated times,date, etc.

The following screen shots of the software in action hopefully show what it is capable of:

Standard 'IE' view of reconstruced web page from users cache. Note the sort option shows all web pages visited on a particular day.



Forensic tabular view of web page objects. All the relevant data is provided for the forensic examiner




If you would like to know more, or wish to participate in the beta test then please feel free.

Finally, as the software is being written as part of my MSc dissertation, it will obviously be rigorously tested to verify the results against other tools, and my ultimate intention (upon completion of the MSc) is to provide the software free of charge.!

Hope this answers your question.

Kind regards

Paul Slater  
 
  

Wardy
Senior Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Oct 26, 05 11:36

Paul,
as an ex software developer, I would gladly beta test your application.

Andy.  
 
  

zyborski
Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Oct 26, 05 14:14

Thanks Andy,

please email me with your details:

[email protected]

paul  
 
  

zyborski
Member
 

Re: Beta Test - Forensic Internet Explorer

Post Posted: Dec 13, 05 19:46

I'd like to thank all those who signed up to beta test this application.

i now have sufficient people on board to test the software in its current form (and to write about for my thesis!)

I anticipate that the software will be made available (free) for general release some time in the New Year, and I will post back details here to all who are interested.

Kind regards

Paul Slater
_________________
Zyborski 
 

Page 1 of 1