Google Chrome Foren...
 
Notifications
Clear all

Google Chrome Forensics

14 Posts
6 Users
0 Likes
1,541 Views
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

Google has released a new browser, and to match we have a new forensic tool to go along with it. I have finished a forensic analysis program that works much like FireFox Forensics. All you have to do is point it at the profile folder and it will extract all the information for you. The following link should take you to the download page. If not, then let me know.
http//www.machor-software.com/google_chrome_forensics
Feel free to give it a shot. Have fun! D

 
Posted : 05/09/2008 12:26 pm
(@uktonyk)
Posts: 15
Active Member
 

You might want to mention that you need .NET Framework v2.0.50727 installed for this to work.

 
Posted : 05/09/2008 3:01 pm
(@oldbloke1)
Posts: 19
Active Member
 

Thank you. Shall give it a run to see how it works out. )

 
Posted : 05/09/2008 3:49 pm
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

Sorry about forgetting to mention .NET Framework. It was almost 330 AM. My brain was kind of turning to mush. Also, to view the Thumbnails and the FavIcons, right click on the record and a menu will pop-up allowing you to Preview or Save the images.

 
Posted : 05/09/2008 5:31 pm
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

I would like to extend an offer of five free licences for Google Chrome Forensics. There, of course, is a catch. What I need back from those who accept this, is the promise of detailed feedback. What you do like, don't like, would like to see, or error that you come across. I have published this program quickly after the release of the browser, but have spent roughly 27 hours creating it. (No, did not get much sleep D) I put a lot of work into both this and FireFox Forensics, and would like to know what people think of them. I did get a really good response from a officer in the Avon & Somserset Constabulary stating that FireFox Forensics had turned up information that they had not previously seen using EnCase or FTK (that doesn't meant it wasn't there). This is the kind of information that I would like to know. I take this seriously, and want to make a program that is better than others out there. Thank you!

 
Posted : 05/09/2008 10:16 pm
(@timgruber)
Posts: 3
New Member
 

I'm in. A colleague and I are in the Digital Forensics Masters program at the University of Central Florida (we are full time CF examiners for a large entertainment company). We would love to help with the development/refinement of the product. We did as much research testing as we could as soon as Chrome came out. We were able to decipher the data structure and convert the date/time stamps are are getting ready to write a technical paper on Chrome forensics.

 
Posted : 06/09/2008 7:50 am
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

Alright, I need to adjust several of the timestamps to the 1970 date, but other than that I believe it should all work good.

 
Posted : 06/09/2008 7:55 am
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

All I have fixed a small bug. There are two dates that are used for the timestamps, and I forgot to change them over on the Thumbnails and FavIcons. This is fixed and will be up later tonight.

 
Posted : 06/09/2008 7:59 am
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

Tim, I apreciate the join in. I'll get the bug out and re-upload to my site. Once this is done, I will send you a copy of the registration information. Thanks for the interest.

 
Posted : 06/09/2008 8:01 am
(@mmachor)
Posts: 70
Trusted Member
Topic starter
 

Update There is a new version of Google Chrome Forensics availiable. I have had several wonderful people that have done some Beta Testing for me, and have updated the software accordingly. There are still some updates that are in progress, but much has been done. Please check it out if you haven't already. If you have, then check out the updates. Thanks!!!

 
Posted : 18/09/2008 9:45 am
Page 1 / 2
Share: