New windows Interne...
 
Notifications
Clear all

New windows Internet forensics kit

8 Posts
6 Users
0 Likes
364 Views
(@1fonzy)
Posts: 20
Eminent Member
Topic starter
 

Hi all

For my final year project ive done a windows Internet forensic kit
Its imports the following from Mozilla firefox
*Cookies
*Downloads
*Form History
*Permissions
*Bookmarks
*Sites visited

Internet Explorer
*Cookies
*index.dat(still working on the code)

Google Chrome
*same as firefox

It displays the information and outputs the data to csv files.

*It also contains dns lookup, whois tool and also a world wide map which displays the location of the website URL or an IP address

I cant upload the app due to it being a final year project and could start appearing on the internet. I uploaded a video of what the app does. I just want to know what people think of it or what other features i should add.
Any help would be appreciated
Heres the link
http//cid-2cb7c0e9cd0296b6.skydrive.live.com/redir.aspx?resid=2CB7C0E9CD0296B6!279&Bpub=SDX.Docs&Bsrc=GetSharingLink

Pass on zip file is 20029712

Cheers

 
Posted : 20/07/2010 3:37 am
(@agbarnet)
Posts: 75
Trusted Member
 

The first thing I notice is how often that 'Name' prompt appears. Is it necessary to ask the user's name for every operation?

Also, for the firefox profile, could you display a list of profiles instead of requiring the user to type the name of the profile?

Other than that, it looks pretty good.

 
Posted : 20/07/2010 3:56 am
(@1fonzy)
Posts: 20
Eminent Member
Topic starter
 

Thanks for the feedback agbarnet. I am going to make them changes.

I am also thinking about adding an "email and chat tab" which will give me email addresses they logged in with or chat names they used and at what times they did. Any one think this would be useful?

Cheers

 
Posted : 20/07/2010 4:30 am
(@mindsmith)
Posts: 174
Estimable Member
 

It would be nice to be able to rebuild webpages from cache as an option

 
Posted : 20/07/2010 11:09 am
(@1fonzy)
Posts: 20
Eminent Member
Topic starter
 

Well MindSmith

Do you know of a program that does this allready? Working on it at the moment and just want to compare

Thanks

 
Posted : 21/07/2010 1:41 am
Fab4
 Fab4
(@fab4)
Posts: 173
Estimable Member
 

Well MindSmith

Do you know of a program that does this allready? Working on it at the moment and just want to compare

Thanks

For one, EnCase.

 
Posted : 21/07/2010 2:22 am
CFEx
 CFEx
(@cfex)
Posts: 69
Trusted Member
 

Well MindSmith

Do you know of a program that does this allready? Working on it at the moment and just want to compare

Thanks

WebCache

 
Posted : 21/07/2010 2:44 am
(@raziel)
Posts: 1
New Member
 

NetAnalysis and CacheBack

 
Posted : 22/07/2010 12:03 am
Share: