Notifications
Clear all

Need help guys

18 Posts
10 Users
0 Reactions
1,934 Views
(@bigmartymac)
Active Member
Joined: 13 years ago
Posts: 5
Topic starter  

I am aware this is quite easy but this question is causing me problems. Any help would be welcomed. Im using Caine Forensics 2.5.1

Question 2 Pasco

The other way of inspecting information inside the index.dat is to use application called PASCO which parses information inside the file and sends to delimited text files that can be imported elsewhere.

Copy the file Documents and Settings/amy/Local Settings/Temporary Internet Files/Content.IE5/index.dat to /home/caine/evidence/index.dat. You need to use ifind and icat. In ifind, use the "-n" flag with the full file pathname in quotes.

Kind Regards,

Martin


   
Quote
Adam10541
(@adam10541)
Honorable Member
Joined: 13 years ago
Posts: 550
 

What's your question?


   
ReplyQuote
(@bigmartymac)
Active Member
Joined: 13 years ago
Posts: 5
Topic starter  

Copy the file Documents and Settings/amy/Local Settings/Temporary Internet Files/Content.IE5/index.dat to /home/caine/evidence/index.dat. You need to use ifind and icat. In ifind, use the "-n" flag with the full file pathname in quotes.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Copy the file Documents and Settings/amy/Local Settings/Temporary Internet Files/Content.IE5/index.dat to /home/caine/evidence/index.dat. You need to use ifind and icat. In ifind, use the "-n" flag with the full file pathname in quotes.

I can see no question marks anywhere roll .

What you posted is NOT a question, is a set of instructions.

jaclaz


   
ReplyQuote
(@bigmartymac)
Active Member
Joined: 13 years ago
Posts: 5
Topic starter  

sorry my question is how do I use the Ifind and Icat within this set of instructions? I would like to now the format and structure of ICAT & IFIND


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

sorry my question is how do I use the Ifind and Icat within this set of instructions?

I'd start by downloading the tools…just sayin'.

I would like to now the format and structure of ICAT & IFIND

You would want to look at the source code for each of these tools.


   
ReplyQuote
Chris_Ed
(@chris_ed)
Reputable Member
Joined: 16 years ago
Posts: 314
 

bigmartymac there are man pages (i.e, detailed help files) for each of these commands on the sleuthkit website.

Here's a link to the icat one.

And here's the one for ifind.

Generally, when you're using a UNIX command shell, you can type "man <command name>" in the prompt and it should provide you with detailed help and usage of that command.

Hope this helps! )


   
ReplyQuote
(@joethomas)
Trusted Member
Joined: 16 years ago
Posts: 65
 

Anyone reckon we need a new forum for homework questions?


   
ReplyQuote
keydet89
(@keydet89)
Famed Member
Joined: 21 years ago
Posts: 3568
 

Why is it a problem if someone asks a homework question?


   
ReplyQuote
jhannon
(@jhannon)
Active Member
Joined: 13 years ago
Posts: 19
 

I don't think it's a problem posting a homework question - forums like this are a great source of information that may not be readily available elsewhere.

What people do have a problem with, is people wanting to get the answers spoonfed to them. I've seen people post up sections of code, disk images and entire questions, wanting people to give them the answer. If that happens, the student doesn't learn anything - they certainly won't be able to explain how they got that answer if the lecturer asks!


   
ReplyQuote
Page 1 / 2
Share: