Software for Computer Forensics

Code

Other Software (7)

FBID - Read in the typeahead_friends.php file.

FBID will read in the 'typeahead_friends.php' file associated with a FB Profile. Although it is a php
file it has elements of a JSON structure. I have broken down the elements of the file so that the
indivdual account details can be seen. By default, the built in browser will display Facebook. When
you click on a FB User, and the users profile is still active, their profile will appear in the browser.

MD5:A7E8043063D6C1AECB980207681FE4A3

N-SID - Read the Nero Scout Media DB

This is a little tool which interprets the Nero SID.db file which is part of Nero Scout. The db file contains a listing of media files present on the drive. I have attached a small db file which will indicate the type of material that can be collected in this file.

MD5:68D60FAD0F7518A1C164E8CC05862D61

SSD - SuggestedSites Parser

This tool will parse the SuggestedSites.dat file that can be present within IE8. The data contains URLs and dates. For more information see the link below. When the file is parsed, double clicking on the URL will cause the tab to switch to a built in browser. If you have internet access, the browser will populate with the linked URL. Thanks to Richard Drinkwater for bringing this to my attention.

MD5:4D21BF12B7F0993AE06D932D598AC5CA

iTime - System v Internet Time

iTime provides a method to see the difference between the system time and internet time utilising a call to the server at time.windows.com. This application will automatically close after 60 seconds. Data can be flushed to Notepad. By default the data is stored in the path 'C:/iTime.txt'. Depending on threads, it may take more than one attempt to resolve the time.

You are viewing the text version of this site.

To view the full version please install the Adobe Flash Player and ensure your web browser has JavaScript enabled.

Need help? check the requirements page.


Get Flash Player