Viewing Windows Live message fragments in readable format

You have two issues here; the first is the fact it is embedded in Chrome History, the other is the conversion of the chat content.

For the Chrome History, it is an SQLite database - so you can download a free SQLite browser and have a look about yourself. the field you most lilely want to look at is the "page_content" field, which stores a stripped version of the text in the visited web page.
Alternatively, if that sounds too in-depth, then you could use Chrome Forensics by Mark Woan, which is free. Link here.

With regard to Windows Live Messenger chat - it will normally either be in XML format (which is what it is natively stored in) or in HTML (which is what Messenger Plus! stores it in). Personally I find it surprising that these would appear in Chrome History, but there you go.

The HTML should be readable by exporting the chat content into a .html file. To view XML chat logs sensibly, the easiest method is to export it into a folder which contains the relevant stylesheet - in this case MessageLog.xsl. The chat logs will then be nicely formatted when you view them.

You have two issues here; the first is the fact it is embedded in Chrome History, the other is the conversion of the chat content.

For the Chrome History, it is an SQLite database - so you can download a free SQLite browser and have a look about yourself. the field you most lilely want to look at is the "page_content" field, which stores a stripped version of the text in the visited web page.
Alternatively, if that sounds too in-depth, then you could use Chrome Forensics by Mark Woan, which is free. Link here.

With regard to Windows Live Messenger chat - it will normally either be in XML format (which is what it is natively stored in) or in HTML (which is what Messenger Plus! stores it in). Personally I find it surprising that these would appear in Chrome History, but there you go.

The HTML should be readable by exporting the chat content into a .html file. To view XML chat logs sensibly, the easiest method is to export it into a folder which contains the relevant stylesheet - in this case MessageLog.xsl. The chat logs will then be nicely formatted when you view them.

Chris,

Many thanks for that. I have used the SQlite browser and isolated the text that I needed! brilliant and thank you.

There are indeed window Live Hotmail fragments along with Facebook excerpts contained within these files (History Index) When accessed through Encase. Some Very useful evidence (certainly in my current case).

Help much appreciated ta.

DrG

If this is still actual, Belkasoft Evidence Center can help you with MSN/Live Messenger and with Hotmail in RAM/hibernation/page files. You can try it for free at http//belkasoft.com.

really, we can try it for free? Which are the limitations?
thanks

really, we can try it for free? Which are the limitations?
thanks

It works for 10 days and extracts no more than 20 messages per a contact. If this is not enough for you, please contact support at belkasoft.com and we will try to help you.

Internet evidence finder is the leading product for data recovery and a free trial is available at www.jadsoftware.com.