|
Internet Browsers |
Microsoft Internet
Explorer v3 (Client UrlCache MMF Ver 3.2) |
|
Microsoft Internet
Explorer v4 (Client UrlCache MMF Ver 4.7) |
|
Microsoft Internet
Explorer v5 - 8 (Client UrlCache MMF Ver 5.2) |
|
Mozilla Firefox v1 - 2 (Mork DB and Cache Map) |
|
Mozilla Firefox v3 (SQLite and Cache Map) |
|
Flock v2 |
|
Orca v1 |
|
Avant v7 - 11 |
|
Netscape Communicator v4.0 – 4.08 (Little and Big
Endian Format) |
|
Netscape Communicator v4.5 – 4.8 (Little and Big
Endian Format) |
|
Netscape v6.0 – 6.2.3 |
|
Netscape v7.0 – 7.2 |
|
Netscape v8.0 – 8.1.3 |
|
Netscape v9.0 – 9.0.0.6 |
|
AOL Browser ARL File |
|
Opera v9 – 10* (Cache support soon) |
|
Yahoo! BT (British Telecom) Browser |
|
Apple Safari Windows v3 – 4* (Cache support soon) |
|
Apple Safari Mac OSX v1 - 4* (Cache support soon) |
|
Apple Safari (XML) PLIST XML formatted PLIST |
|
Apple Safari (Binary) PLIST Binary Formatted PLIST |
|
Mozilla / Firefox / Netscape Bookmark |
|
Reporting & Analysis |
|
Add
bookmarks to URL records which can be used to
evidence user activity |
|
Advanced
Evidence Report showing user bookmarks and important
data |
|
Multiple
Keyword Searching, Sharing, Importing & Exporting |
|
Example
keyword lists for common forensic investigations |
|
Auto
Investigate to find suspect sites, search engine
criteria, usernames & passwords |
|
Filter
Searching Bar to search multiple keywords across
multiple fields |
|
Direct
SQL Feature to create your own SQL queries |
|
Powerful
filtering, searching and keyword highlighting |
|
Identify
Yahoo web based e-mail activity and Hotmail e-mail
activity |
|
Groups
URL records by Category, URL, FTP, Redirect, e-mail
activity and Host Sites |
|
Analytical
Reports - Frequency, Grouping and Advanced |
|
Other
Features |
|
Cache
Constructor & Offline File Viewer - first
forensic tool to rebuild web pages |
|
Extract
Internet History with dates and times from
unallocated space using HstEx |
|
HstEx 3
- Separate History (E01, DD Image, Segmented Image,
Direct Disk Access) |
|
In-built
cookie viewer and decoder! |
|
OPEN
history from a base folder location - will hunt for
history files preserving path |
|
Customise
column view - switch off the columns you don't want
|
|
Can
identify the type of INDEX file the URL came
from just by examining the URL record |
|
Can
be used as a file viewer within EnCase™ – right
click to analyse the History file |
|
Send
the FULL PATH of the History File from Encase to
NetAnalysis |
|
Can
be used as a file viewer from within Windows. Send a
history file to NetAnalysis |
|
Open
all history files at once so analysis time is
reduced |
|
Save
your analysis to return at a later date |
|
Sort
and group URL records by date/time, type, content,
user, page title, tag etc., |
|
Export
data as Tab Delimited, Access Database, HTML, Text, RTF |
|
Shows
the date/time and day the URL was last visited |
|
Supports
Dynamic Daylight Saving settings for Time Zones |
|
Supports
multiple date/time formats for different countries |
|
Copy
URLs, data or full record to the clipboard |
|
Auto
filtering of Search Criteria identifying what user
has been searching for |
|
Auto
filtering of content to identify possible child
pornography activity |
|
Auto
filtering of HTTP/File/FTP/e-mail activity |
|
Auto
filtering of JPEG's, Movie Clips and Archive Files |
|
Search
and filter hundreds of thousands of URL records in a
fraction of a second |
|
Powerful
analysis of Internet History without having to
restore the suspect hard drive |
|
Export
analytical reports in RTF format |
|
Technical
support forum, knowledge base and online support |
|
Friendly,
familiar user interface |
