Capturing Facebook ...
 
Notifications
Clear all

Capturing Facebook pages

12 Posts
10 Users
0 Likes
996 Views
flamerescue150
(@flamerescue150)
Posts: 23
Eminent Member
Topic starter
 

In the cival world…

Given that I have lawful access to log into a facebook account, what "forensic" methods could I use (other than screenshots) to capture all wall posts, messages, uploaded photos, etc?

 
Posted : 22/03/2012 4:42 am
(@jlellis)
Posts: 16
Active Member
 

If you have access to the facebook account and the email address associated with the account you can use facebook's archive function (account settings menu).

An archive will pull all of the target's information.

 
Posted : 22/03/2012 5:04 am
flamerescue150
(@flamerescue150)
Posts: 23
Eminent Member
Topic starter
 

Thank you, that is pretty much what i'm looking for.

I've requested an archive from facebook on my own account as a test, but it now says the archive download is pending and will notify me by email when it is ready. I do not have legal access to the suspect email account. Do I need the email to gain access to the download or can I access it directly from facebook?

 
Posted : 22/03/2012 5:20 pm
(@mindsmith)
Posts: 174
Estimable Member
 

@flamerescue150 - do you or don’t you have legal access to the account - as your last post seems to contradict your original post??

If you do have legal access to the account you could do

1. As per JEllis’s suggestion, or
2. Logon with the user’s credentials and then using Webcase from Vere Soft - drill down through the user’s profile wall posts, friends profile, Photos, etc - while Webcase records each artifact in a forensically sound manner for later viewing in native form.
- Both these methods apply to an account you own or have legal access to - not to someone else’s account!

Methods 1 & 2 will give you current data from the account, but this data only covers 22 of the 57 categories of data stored for the account. The reason you cannot use the archive feature at present is due to the high number of requests already received (allegedly).

If you do not have legal access to the suspect’s account - then you have to go via your local Law Enforcement.

Ps an aside legally under Facebook’s T&Cs the user of the account CANNOT share their login credentials with _anyone_

 
Posted : 25/03/2012 2:47 pm
ChopOMatic
(@chopomatic)
Posts: 14
Active Member
 

My take was that OP was saying he does have legal access to the Facebook account but not the email account. Thus if the results were only available via email delivery it would be a problem.

 
Posted : 25/03/2012 3:44 pm
(@jonathan)
Posts: 878
Prominent Member
 

legally under Facebook’s T&Cs the user of the account CANNOT share their login credentials with _anyone_

There are no legal consequences of sharing your Facebook credentials as far as I can see, part 14 of their terms stating "If you violate the letter or spirit of this Statement, or otherwise create risk or possible legal exposure for us, we can stop providing all or part of Facebook to you". Not such a big deal.

 
Posted : 25/03/2012 8:27 pm
flamerescue150
(@flamerescue150)
Posts: 23
Eminent Member
Topic starter
 

Correct, I have legal access to the facebook account but not to the associated email account.

The built in archive feature of facebook works fairly nice and can be accessed directly from the logged in account. However, portions of the downloaded archive do not display in a usable format. When testing on my own account, my private messages/conversations displayed out of kilter and were unreadable. Additionally, for wall posts that I posted on a friend's wall… only the message was display and did not show who's wall I posted it on.

This being said, in a circumstance such as this I would say the built in archive function comes as close to best evidence as i can get without a subpoena to facebook since the data is provided directly from facebook?

 
Posted : 27/03/2012 10:46 pm
 lars
(@lars)
Posts: 31
Eminent Member
 

If you have $945 to spend, X1 Social Discovery is very nice for this type of collection - no subpoena required http//www.x1discovery.com/

 
Posted : 28/03/2012 4:44 am
(@belkasoft)
Posts: 169
Estimable Member
 

Belkasoft has a free tool for capturing Facebook pages, called Belkasoft Facebook Profile Saver. See http//forensic.belkasoft.com/en/facebook_profile_saver.

 
Posted : 08/11/2013 1:20 am
(@urengoy)
Posts: 1
New Member
 

Nextpoint is only $19 a month. You can use that instead of $1k for X1

 
Posted : 24/11/2013 9:33 pm
Page 1 / 2
Share: