|
Internet Browsers |
Microsoft Internet
Explorer v3 (Client UrlCache MMF Ver 3.2) |
|
Microsoft Internet
Explorer v4 (Client UrlCache MMF Ver 4.7) |
Microsoft Internet
Explorer v5 - 8 (Client UrlCache MMF Ver 5.2) |
Mozilla Firefox v1 - 2 (Mork DB and Cache Map) |
Mozilla Firefox v3 (SQLite and Cache Map) |
Flock v2 |
Orca v1 |
|
Avant v7 - 11 |
Netscape Communicator v4.0 – 4.08 (Little and Big
Endian Format) |
Netscape Communicator v4.5 – 4.8 (Little and Big
Endian Format) |
Netscape v6.0 – 6.2.3 |
Netscape v7.0 – 7.2 |
Netscape v8.0 – 8.1.3 |
|
Netscape v9.0 – 9.0.0.6 |
AOL Browser ARL File |
Opera v9 – 10* (Cache support soon) |
Yahoo! BT (British Telecom) Browser |
Apple Safari Windows v3 – 4* (Cache support soon) |
Apple Safari Mac OSX v1 - 4* (Cache support soon) |
|
Apple Safari (XML) PLIST XML formatted PLIST |
Apple Safari (Binary) PLIST Binary Formatted PLIST |
Mozilla / Firefox / Netscape Bookmark |
|
Reporting & Analysis |
Add
bookmarks to URL records which can be used to
evidence user activity |
Advanced
Evidence Report showing user bookmarks and important
data |
Multiple
Keyword Searching, Sharing, Importing & Exporting |
Example
keyword lists for common forensic investigations |
Auto
Investigate to find suspect sites, search engine
criteria, usernames & passwords |
Filter
Searching Bar to search multiple keywords across
multiple fields |
Direct
SQL Feature to create your own SQL queries |
Powerful
filtering, searching and keyword highlighting |
Identify
Yahoo web based e-mail activity and Hotmail e-mail
activity |
Groups
URL records by Category, URL, FTP, Redirect, e-mail
activity and Host Sites |
Analytical
Reports - Frequency, Grouping and Advanced |
|
Other
Features |
Cache
Constructor & Offline File Viewer - first
forensic tool to rebuild web pages |
Extract
Internet History with dates and times from
unallocated space using HstEx |
HstEx 3
- Separate History (E01, DD Image, Segmented Image,
Direct Disk Access) |
In-built
cookie viewer and decoder! |
OPEN
history from a base folder location - will hunt for
history files preserving path |
Customise
column view - switch off the columns you don't want
|
Can
identify the type of INDEX file the URL came
from just by examining the URL record |
Can
be used as a file viewer within EnCase™ – right
click to analyse the History file |
Send
the FULL PATH of the History File from Encase to
NetAnalysis |
Can
be used as a file viewer from within Windows. Send a
history file to NetAnalysis |
Open
all history files at once so analysis time is
reduced |
Save
your analysis to return at a later date |
Sort
and group URL records by date/time, type, content,
user, page title, tag etc., |
Export
data as Tab Delimited, Access Database, HTML, Text, RTF |
Shows
the date/time and day the URL was last visited |
Supports
Dynamic Daylight Saving settings for Time Zones |
Supports
multiple date/time formats for different countries |
Copy
URLs, data or full record to the clipboard |
Auto
filtering of Search Criteria identifying what user
has been searching for |
Auto
filtering of content to identify possible child
pornography activity |
Auto
filtering of HTTP/File/FTP/e-mail activity |
Auto
filtering of JPEG's, Movie Clips and Archive Files |
Search
and filter hundreds of thousands of URL records in a
fraction of a second |
Powerful
analysis of Internet History without having to
restore the suspect hard drive |
Export
analytical reports in RTF format |
Technical
support forum, knowledge base and online support |
Friendly,
familiar user interface |