Search Seized Drives
for Histories
This product allows you to search whole hard drive for
all supported types of histories: Instant Messenger
chats, Browser URL history and cookies along with
various mailboxes.
Searches can be performed against:
- A single drive or
multiple drives
- Specific folders
- Particular types (e.g.
only Skype files)
- Drives mounted within
EnCase
Analyze found
histories
- The product does all
analysis with two mouse clicks
- No password required
- Write access is not
required; works with write-blocking devices
Explore extracted
histories
The product shows extracted messages in user-friendly
form. Within the user interface you can:
- See all available
histories and their extraction status
- See all contacts
belonging to a specific profile
- See all conversations
with a selected contact
- Sort by time, message
direction, message text
- Apply filtering
Simple & Advanced
Searching
- Keyword files can be
imported
- Search with regular
expressions
Export history
The product allows you to export history to:
- Plain text
- HTML
- XML
- CSV format
- Constrain exported
history to selected dates and contacts
- Split huge histories
into separate files, broken by contact
Instant Messengers
support
The following IMs are supported:
- ICQ (all versions from
97a to ICQ 7)
- Microsoft MSN/LiveMessenger
- Skype versions 2, 3, 4
- Yahoo! Messenger
- MySpace IM
- &RQ
- Miranda
- SIM
- QIP
- QIP Infium
- Google Hello
- Trillian
- QQ (2008 and earlier)
- Digsby
- Rambler Virtus
- Mail.Ru Agent
- AIM (search history
files only)
Supported Browsers
The following browsers are supported:
- Microsoft Internet
Explorer including IE version 8
- Mozilla Firefox
versions 2 and 3
- Opera
- Google Chrome
Supported Mailboxes
The following mailbox types are supported:
- Microsoft Outlook 2003
and 2007
- Microsoft Outlook
Express
- RITLabs The Bat! (beta
version)
