My friend is working on some case, and she looks not in the mood. I ask her what's going on. She wants me to look at the screenshot as below. That's why she is upset…IEF could not decode Chinese character in IE history well, so the filenames in Chinese could not be recogninzed. You may wonder what's wrong with IEF??? Let's proceed and see what I can do for her. You guys could take a look at my blog to see how I solve this issue for her
http//
Can you imagine the difficulty of examining and analyzing evidence if you could not see the filenames in IE history??? Now she is happy and keep on working~
You can try our Belkasoft Evidence Center (http//
gorvq7222,
Thank you for the advice regarding Notepad++'s ability to decode URLs - very useful for a free tool.
Do you work for the government in China, or are you a private consultant? I would like to establish some forensic relationships in China, so please PM me if you are interested.
Regards,
Larry
Hi Belkasoft,
Thanks for your info. Actually I've using Belkasoft for a very long time. You guys could take a look at my blog as below
http//
Belkasoft Evidence Center could handle Chinese characters well, so we don't have to worry about URL decoding or something like that…
In my opinion, Belkasoft Evidence Center and Internet Evidence Finder are both good forensic tools. But when it comes to Chinese characters issue, the former is better than the latter. Hope IEF could solve this problem ASAP…
Hi gorvq7222,
That's a great workaround. I never knew Notepad++ was able to decode URLs. I've also created a ticket to look at adding a similar feature in IEF. Currently for URLs we report the data in HTML but it should be easy enough to allow the conversion which should help with a number of different languages.
Jamie
Hi mcman,
You're welcome. Notepad++ also could convert ASCII to Hex or Hex to ASCII, a very useful function.
In my opinion, if Belkasoft Evidence Center could handle Chinese characters well, as a major competitive product, IEF should meet the requirement ASAP.