Join Us!

Notifications
Clear all

URLs diagnostic whith deft  

  RSS
hezy
 hezy
(@hezy)
New Member

Hi,
I have to find with Deft, explorer's URLs on an image I've created with Deft. The system on the image is window7 and the explorer is IE8. Thanks,
Hezy.

Quote
Posted : 21/09/2016 4:34 pm
passcodeunlock
(@passcodeunlock)
Senior Member

Mount your image and find your files needed for analyzing at these paths

%systemdir%\Users\%username%\AppData\Local\Microsoft\Windows\Temporary Internet Files\
%systemdir%\Users\%username%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\

Read more about IE history at

http//www.forensicswiki.org/wiki/Internet_Explorer_History_File_Format

ReplyQuote
Posted : 21/09/2016 11:22 pm
Share: