Facebook messenger ...
 
Notifications
Clear all

Facebook messenger preservation

13 Posts
9 Users
0 Reactions
3,708 Views
(@sansarmaa)
Eminent Member
Joined: 10 years ago
Posts: 22
Topic starter  

so i tried fireshot addon on chrome, but its taking only 400px width screen shots, anyway to preserve, save, export to pdf? im talking bout looooongggg chats with 100k+ rows.


   
Quote
(@jahearne)
Eminent Member
Joined: 9 years ago
Posts: 35
 

The only tools I can think of, cost almost $2,000 a year to license. I don't know if any open source tools. Maybe some kind of application that is good a web-crawling tool might be customized to work for you.

John


   
ReplyQuote
(@sansarmaa)
Eminent Member
Joined: 10 years ago
Posts: 22
Topic starter  

firefox with fireshot solved my problem, but i think its temporary though, some new update and everything goes blahh


   
ReplyQuote
(@stefspvq)
Active Member
Joined: 10 years ago
Posts: 14
 

Best way to save facebook messenger if you have acces to the facebook account is extractface. Work great. Export in html with pic and video if you want.

Save me lot of time.

http//www.le-tools.com/ExtractFace.html


   
ReplyQuote
Red1
 Red1
(@red1)
Active Member
Joined: 10 years ago
Posts: 19
 

www.facebook.com/records

If your LE and in the US (not sure about other countries) I find it much easier to just request a preservation for the page and then get a search warrant. They deliver them in PDF and .zip format and are easy to search.

Facebook will preserve a page with no probable cause, so even if you're not sure where the case may go you can just preserve everything and then get the warrants later. You of course need some documentation for contents or subscriber info (subpoena or warrant).

Of course they take their time doing anything not child exploitation related. What I have done in the past is is capture the relevant chats with a screen-cap tool and then get the rest with a warrant.


   
ReplyQuote
passcodeunlock
(@passcodeunlock)
Prominent Member
Joined: 9 years ago
Posts: 792
 

I can say only good things about the Facebook Law Enforcement Response Team and their cooperation, their system works fine if you submit a subpoena.


   
ReplyQuote
(@deltron)
Estimable Member
Joined: 11 years ago
Posts: 125
 

If you are logged onto the user account you should be able to request an archive of the account through facebook. They give you a pdf with everything.


   
ReplyQuote
(@antairo)
New Member
Joined: 8 years ago
Posts: 4
 

I tried ExtractFace as suggested by someone in the page but found it was very slow and would only take one chat thread at a time. We ended up writing our own, you can see it here http//www.exportfacebook.com/

It does work by web parsing. Feel free to send me any questions or suggestions.

Don't know if I am allowed to post this here, if not please remove.


   
ReplyQuote
(@joweis)
New Member
Joined: 8 years ago
Posts: 3
 

In my case I should extract local stored, cached FB messages. As far as I know and mentioned above messages are not saved/cached on your local PC. Furthermore I don´t know if there is a different behavior for the Facebook messenger or the integrated FB chat.

The FB account itself is disabled, so there is no possibility to do an online investigation.

I´m using Encase, however this doesn´t help a lot if I don´t know what to search for.
Any help or verified conclusion is appreciated.

Thank you in advance.
Josef


   
ReplyQuote
(@antairo)
New Member
Joined: 8 years ago
Posts: 4
 

Yes the tool will only work if you have legal access to a functioning facebook account. If you are Law Enforcement the best would be to use the service facebook specifically provides - https://www.facebook.com/records/x/login/

We use Belkasoft and sometimes it picks up chat records from a pc image but usually would try extracting them of a mobile phone or tablet as they are easier to recover from there.

I think facebook messenger and the integrated FB chat are the same messages.


   
ReplyQuote
Page 1 / 2
Share: