New IM Forensics Tool

Sounds interesting but would you mind telling us what your tool does, e.g.

it identifies what programs are installed and collects saved chat logs?
it carves artefacts of chat from unallocated?
it identifies contacts and decrypts?

etc.

Thanks

H

Thanks for all the interest. I've PM'd everybody who replied here a link for the download. If you have any questions or suggestions while using my program, please PM me or post here.

Also, I've made a brief video that shows how to use the tool. If you're interested, you can see it here
http//www.youtube.com/watch?v=jBcG5u0piSI

Sounds interesting but would you mind telling us what your tool does, e.g.

it identifies what programs are installed and collects saved chat logs?
it carves artefacts of chat from unallocated?
it identifies contacts and decrypts?

etc.

Thanks

H

It searches for AIM, MSN, and Yahoo messenger installation. If it finds them, it allows you to import chat logs (and also decrypts Yahoo logs. The others are stored in cleartext) and lists the usernames that were used on that particular computer. As far as I'm aware, buddy lists are stored remotely so it can't do that, although it does generate a partial buddy list based on chat logs for AIM. It can also pull Photoshare caches from MSN and Yahoo. Finally, it can search logs for words or phrases and can export based on those searches.

At this point it can't search unallocated for artefacts, but I'm hoping to add that capability in the near future.

Alex,
Your tool looks very interesting. Not sure if you are still looking for Beta testers, but if you are I'd be interested.

Thanks!

Alex,
Your tool looks very interesting. Not sure if you are still looking for Beta testers, but if you are I'd be interested.

Thanks!

PM'd you a link. Thanks for the interest!

EDIT Actually it looks like the forum is still sending all of my PMs. You'll receive that PM sooner or later.

jjjj

Hi Alex,

I'd be more than glad to test this tool out

Thanks a lot for sharing that !

Thanks for all the interest! I've sent PMs to everybody who has posted here and messaged me, but for some reason only 4 have actually been delivered. All the rest are sitting in my outbox for some reason. So, if you haven't received a response from me yet, rest assured that I've sent you a link and you'll get it soon.

Alright, since the PM system doesn't seem to like how many messages I'm sending and my outbox appears to be stuck, I'll just post a link to the file in this thread.

This zip contains the program itself plus a generic license that expires in one month. I'll take the link down in 24ish hours

http//www.alexbarnett.com/chatsniper.zip

Enjoy, and please send me and questions or comments.

Thanks for the feedback so far. I'm really trying to respond the the PMs I'm receiving, but for some reason they're just not sending. If you need to contact me with questions or error reports, please post here or email me at alex@alexbarnett.com.