±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35770
New Yesterday: 2 Visitors: 85

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Skype chat carver from RAM

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

nickfx
Senior Member
 

Skype chat carver from RAM

Post Posted: Mar 10, 10 00:13

Hi all

I've just released a little free tool for carving Skype chat from a RAM dump. Please feel free to download and have a play. Its written in Python so you will need the framework. Its all in the readme file.

You need to run strings over your RAM dump and then run the tool, its asks for the path to your strings file. It generates 2 files, one csv with complete Skype lines and the other a rougher but more complete 'carve'.

Please let me know how you get on

Either get it here - http://bit.ly/bxECyV
or here - http://csitraining.co.uk/skypex.aspx

For a blog discussion goto http://nickfurneaux.blogspot.com/2010/03/skype-chat-carver-from-ram-skypeex.html

Please don't expect miracles, its fairly simple but seems to work well.

Cheers

Nick Furneaux  
 
  

Rampage
Senior Member
 

Re: Skype chat carver from RAM

Post Posted: Mar 10, 10 05:01

looks interesting.

i'll have some fun with this and let you know Smile  
 
  

jgarcia
Member
 

Re: Skype chat carver from RAM

Post Posted: May 25, 10 21:50

Nick,

I heard your recent interview w/ Ovie on CyberSpeak. Can't wait to give your tool a try. Thanks for sharing!

Joe  
 
  

douglasbrush
Senior Member
 

Re: Skype chat carver from RAM

Post Posted: May 25, 10 23:27

Hey Joe! Welcome to FF. Joe Garcia also does the CyberCrime 101 pod cast.

sorry for hijacking the thread Wink  
 
  

JoelTharas
Senior Member
 

Re: Skype chat carver from RAM

Post Posted: Jun 09, 10 21:40

Thanks for this.

Joel  
 

Page 1 of 1