may i know how can we extract from memory image, if no plugin, how to extract for below events thanks
1) internet chat history
2) IEexplore URL history
3) in private web browse history
4) cookies
5) internet download history
A lot of forensic tools support extraction web artefacts from memory dumps. Such as Belkasoft Evidence Center, AXIOM, Paraben E3, BlackBag, etc.
thank you for your reply, we only use volatility 2.6, no other software, pls indicate that whether it can be resolved by volatility or common software
may i know how can we extract from memory image, if no plugin, how to extract for below events thanks
1) internet chat history
2) IEexplore URL history
3) in private web browse history
4) cookies
5) internet download history
Try to use NirSoft - freeware utilities, its very usefull for me.