Does anyone have any recommendations for forensic level literature on IE Internet Browser History? I've taken training on the subject but would like to have something in my library in terms of research material on the subject.
Book doesn't have to be all about Internet Browser History but needs to include index.dat parsing and explainations.
Thanks!
Have you got Netanalysis ?. It's manual is comprehensive.
The Netanalysis manual is OK but the one thing it doesn't do is tell you how to parse index.dat files - that would be giving away the keys to the kingdom 😉
If you are in to C programming you could examine the code within pasco which you can get
I went on the EnCase Advanced Internet Examinations course a few years ago and I must say the reference book is probably one of my most used resources - it gets down and dirty with the decoding of the records in index.dat files.
I wrote an EnScript based on this information to decode single records in an index.dat file, it's available on the Guidance Support site
Paul