IEF could not decod...
 
Notifications
Clear all

IEF could not decode Chinese character in IE history well

6 Posts
4 Users
0 Likes
399 Views
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

My friend is working on some case, and she looks not in the mood. I ask her what's going on. She wants me to look at the screenshot as below. That's why she is upset…IEF could not decode Chinese character in IE history well, so the filenames in Chinese could not be recogninzed. You may wonder what's wrong with IEF??? Let's proceed and see what I can do for her. You guys could take a look at my blog to see how I solve this issue for her
http//www.cnblogs.com/pieces0310/p/4719603.html

Can you imagine the difficulty of examining and analyzing evidence if you could not see the filenames in IE history??? Now she is happy and keep on working~

 
Posted : 10/08/2015 8:06 pm
(@belkasoft)
Posts: 169
Estimable Member
 

You can try our Belkasoft Evidence Center (http//belkasoft.com/trial, trial is free). The product works with national encodings perfectly, including Chinese, Vietnamese, Arabic, Cyrillic, Japanese, etc. It also works with browser histories, as well as with documents, system files, chats, social networks etc.

 
Posted : 10/08/2015 11:00 pm
UnallocatedClusters
(@unallocatedclusters)
Posts: 577
Honorable Member
 

gorvq7222,

Thank you for the advice regarding Notepad++'s ability to decode URLs - very useful for a free tool.

Do you work for the government in China, or are you a private consultant? I would like to establish some forensic relationships in China, so please PM me if you are interested.

Regards,

Larry

 
Posted : 11/08/2015 7:50 am
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

Hi Belkasoft,

Thanks for your info. Actually I've using Belkasoft for a very long time. You guys could take a look at my blog as below
http//www.cnblogs.com/pieces0310/p/4720456.html

Belkasoft Evidence Center could handle Chinese characters well, so we don't have to worry about URL decoding or something like that…

In my opinion, Belkasoft Evidence Center and Internet Evidence Finder are both good forensic tools. But when it comes to Chinese characters issue, the former is better than the latter. Hope IEF could solve this problem ASAP…

 
Posted : 11/08/2015 8:25 am
(@mcman)
Posts: 189
Estimable Member
 

Hi gorvq7222,

That's a great workaround. I never knew Notepad++ was able to decode URLs. I've also created a ticket to look at adding a similar feature in IEF. Currently for URLs we report the data in HTML but it should be easy enough to allow the conversion which should help with a number of different languages.

Jamie

 
Posted : 11/08/2015 7:15 pm
(@gorvq7222)
Posts: 229
Reputable Member
Topic starter
 

Hi mcman,

You're welcome. Notepad++ also could convert ASCII to Hex or Hex to ASCII, a very useful function.

In my opinion, if Belkasoft Evidence Center could handle Chinese characters well, as a major competitive product, IEF should meet the requirement ASAP.

 
Posted : 12/08/2015 1:43 pm
Share: