[Dshield] Forensics and hard drives

Peter Stendahl-Juvonen peter.stendahl-juvonen at welho.com
Mon Apr 16 14:58:09 GMT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



16.4.2007 16:30 (UTC+3), Darren Spruell kirjoitti/wrote:
>>>> Surely Windows keeps an internal record of
>>>> connections with foreign computers somewhere, but in which file?


Would appreciate ensuring contextual integrity, when quoting posts.

(I am not the author of the quoted assumption. The assumption is not
mine. I mere quoted the OP.)

Apart from the above, thanks for the info in your reply.

Hope you liked returning the favour.   ;)

BTW, would think that MS IE writes data to index.dat file(s) containing
information about connections to other hosts, etc. MS Office Outlook and
MS Outlook Express possibly do the same.


- -Pete


             "Opera is where a guy gets stabbed in the back,
                     and instead of dying, he sings."
          Robert Charles Benchley (1889-1945) US humorist




-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGI48BQ21KCihDnSQRAtqJAJ4sltYq12ymC4CJQKSI4lcfwgzV8wCdEONG
u9ECr7pGKngXrOGZ4SRVUgM=
=H3wB
-----END PGP SIGNATURE-----


More information about the list mailing list