we have got the e01 file, obtained by ftkimager.
We need to find the video of a msn messenger chat.
Where we can find the files? Unckly one of thee pc has been formatted. Before confiscation
thanks
If your lucky you'd get scraps in a hiberfile or pagefile. I'd imagine this video lives in ram and gets very quickly overwritten.
To clarrify, is this a video sent as a file, a video chat live or a captured video of a chat on MSN?
It's a video chat live.
Pertinent information starts on page 83
3.7. Audio and video
In order to use the audio and video functionality the user first has to configure the devices in Windows Live Messenger. When the configuration is completed the binary value ‘RTCTuned’ with the value ‘1’ is created under the registry key ‘HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\'.
Is that the version in question?
thank you very much, I will study the document
bye