IE 8 Browsing history and forensics

General (Technical, Procedural, Software, Hardware etc.)

2 Posts

2 Users

0 Reactions

451 Views

RSS

gfoss

(@gfoss)

New Member

Joined: 16 years ago

Posts: 1

Topic starter 17/07/2009 11:02 pm

Can anyone provide any ideas/methodology in recovering the browsing history from IE 8 with the Inprivate mode enabled?

thanks,
gary

Quote

keydet89

(@keydet89)

Famed Member

Joined: 21 years ago

Posts: 3568

18/07/2009 1:37 am

From http//www.butterscotch.com/tutorial/Private-Browsing-In-Internet-Explorer-8

"In this mode IE8 doesn't save cookies, history, temporary Internet files, and other such online tracks."

There's also this from MS
http//windowshelp.microsoft.com/Windows/en-US/Help/d3152e58-c209-4313-829d-04022af532cc1033.mspx

So, if you're referring to just the history (analogous to the current index.dat files), then it would appear that it's not tracked.

Have you tried running any tests of your own? Perhaps surfing in InPrivate mode while running FileMon? Dumping and parsing physical memory?

ReplyQuote

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed