Is that a tool for use with Encase that can retrieve and allow AOL instant messages to be read? Also where would these such messages be stored on the hard drive?
Many thanks.
Yes
Look at the "Internet and Email Search"
This feature will find, parse, analyze and display amongst many other things AOL emails.
Hope that helps
I know that will display emails, but is there a tool that displays Instant Message conversations, some sort of a log? If so where is it stored? How can I access it and is there any tools to help do so?
Thanks.
Dearster
It's never going to be that easy! I doubt you will get it straight out of Encase.
Instant messaging is usually a difficult area for examinations and often requires research and practical testing.
A quick search on the Internet should reveal some papers on the topic.
Otherwise set yourself up with AIM, run procmon and wireshark or other packet capture, and then look at the artefacts and search your machine for your conversation and artefacts which surround them.
H
Is that a tool for use with Encase that can retrieve and allow AOL instant messages to be read? Also where would these such messages be stored on the hard drive?
Many thanks.
It depends…
By default AIM history is not enabled. If it isn't enabled, well you are not going to be able to retrieve them.
So first you need to find out if History was enabled.