Does any one know any good forensic sites or forums?
TIA
.
.
SAVE THE EARTH......
IT'S THE ONLY PLANET WITH CHOCOLATE
----- Forwarded by Bambi J Saastad/Seagate on 12/18/2009 10:59 AM -----
John Meyers
<jrmeyer...@hotma
il.com> To
No Phone Info "NT System Admin Issues"
Available <[email protected].
com>
cc
12/18/2009 09:01
AM Subject
RE: Retrieving deleted IE and
Firefox history Urgent
Please respond to
"NT System Admin
Issues"
<ntsysad...@lyris
.sunbelt-software
.com>
Sorry but how exactly do I do that? TIA From: [email protected] To: [email protected] Subject: RE: Retrieving deleted IE and Firefox history Urgent Date: Fri, 18 Dec 2009 08:48:14 -0500 You might be able to look at the date/time stamp on the cached objects to get that information. From: Glen Johnson [mailto:[email protected]] Sent: Friday, December 18, 2009 8:25 AM To: NT System Admin Issues Subject: RE: Retrieving deleted IE and Firefox history Urgent IEHistoryView from www.nirsoft.net might give you some info from IE. I don’t think it works with FF though. From: John Meyers [mailto:[email protected]] Sent: Friday, December 18, 2009 7:01 AM To: NT System Admin Issues Subject: Retrieving deleted IE and Firefox history Urgent Good morning I have a laptop I need to somehow salvage ALL the deleted internet history from. IE was set to only keep for 20 days, not sure what Firefox was at. But I need to retrieve EVERYTHING I possibly can. I think the user at some point did a defrag, which is making it more difficult. I tried several analyzer programs that I loaded directly onto the pc to search with for recent activity, which I provided, then they brought it back and told me I needed to go deeper. At that point I removed the HD from it and only accessed it as an external drive to do the below listed attempts to retrieve the data. This is not normally my job, but I was asked to do it, and I'm not having much luck. I MUST have dates and times for the history, not just the sites. I imaged it with ghost and tried to use FireFox History recovery, but it found nothing. I tried Armor Forensic's NAT Stealth, but it only gives sites accessed. I tried File Scavenger from quetek, and it finds lots of things like index.dat files, but when I try to read them with index.dat analyzer they mostly say that they are not index.dat files. It doesn't seem to find any history.dat's. Can someone suggest what else I might try or some good forums for forensics? Thanks JR Hotmail: Trusted email with powerful SPAM protection. Sign up now. Hotmail: Powerful Free email with security by Microsoft. Get it now. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
<<inline: pic10116.gif>>
<<inline: ecblank.gif>>
