Facebook messenger ...
 
Notifications
Clear all

Facebook messenger preservation

13 Posts
9 Users
0 Likes
1,737 Views
(@sansarmaa)
Posts: 22
Eminent Member
Topic starter
 

so i tried fireshot addon on chrome, but its taking only 400px width screen shots, anyway to preserve, save, export to pdf? im talking bout looooongggg chats with 100k+ rows.

 
Posted : 08/11/2016 11:08 am
(@jahearne)
Posts: 35
Eminent Member
 

The only tools I can think of, cost almost $2,000 a year to license. I don't know if any open source tools. Maybe some kind of application that is good a web-crawling tool might be customized to work for you.

John

 
Posted : 09/11/2016 12:37 am
(@sansarmaa)
Posts: 22
Eminent Member
Topic starter
 

firefox with fireshot solved my problem, but i think its temporary though, some new update and everything goes blahh

 
Posted : 09/11/2016 6:20 am
(@stefspvq)
Posts: 14
Active Member
 

Best way to save facebook messenger if you have acces to the facebook account is extractface. Work great. Export in html with pic and video if you want.

Save me lot of time.

http//www.le-tools.com/ExtractFace.html

 
Posted : 12/11/2016 5:55 am
Red1
 Red1
(@red1)
Posts: 19
Active Member
 

www.facebook.com/records

If your LE and in the US (not sure about other countries) I find it much easier to just request a preservation for the page and then get a search warrant. They deliver them in PDF and .zip format and are easy to search.

Facebook will preserve a page with no probable cause, so even if you're not sure where the case may go you can just preserve everything and then get the warrants later. You of course need some documentation for contents or subscriber info (subpoena or warrant).

Of course they take their time doing anything not child exploitation related. What I have done in the past is is capture the relevant chats with a screen-cap tool and then get the rest with a warrant.

 
Posted : 15/11/2016 9:17 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

I can say only good things about the Facebook Law Enforcement Response Team and their cooperation, their system works fine if you submit a subpoena.

 
Posted : 15/11/2016 11:25 pm
(@deltron)
Posts: 125
Estimable Member
 

If you are logged onto the user account you should be able to request an archive of the account through facebook. They give you a pdf with everything.

 
Posted : 16/11/2016 7:48 pm
(@antairo)
Posts: 4
New Member
 

I tried ExtractFace as suggested by someone in the page but found it was very slow and would only take one chat thread at a time. We ended up writing our own, you can see it here http//www.exportfacebook.com/

It does work by web parsing. Feel free to send me any questions or suggestions.

Don't know if I am allowed to post this here, if not please remove.

 
Posted : 13/04/2017 2:25 pm
(@joweis)
Posts: 3
New Member
 

In my case I should extract local stored, cached FB messages. As far as I know and mentioned above messages are not saved/cached on your local PC. Furthermore I don´t know if there is a different behavior for the Facebook messenger or the integrated FB chat.

The FB account itself is disabled, so there is no possibility to do an online investigation.

I´m using Encase, however this doesn´t help a lot if I don´t know what to search for.
Any help or verified conclusion is appreciated.

Thank you in advance.
Josef

 
Posted : 24/04/2017 7:45 pm
(@antairo)
Posts: 4
New Member
 

Yes the tool will only work if you have legal access to a functioning facebook account. If you are Law Enforcement the best would be to use the service facebook specifically provides - https://www.facebook.com/records/x/login/

We use Belkasoft and sometimes it picks up chat records from a pc image but usually would try extracting them of a mobile phone or tablet as they are easier to recover from there.

I think facebook messenger and the integrated FB chat are the same messages.

 
Posted : 24/04/2017 11:01 pm
Page 1 / 2
Share: