An examination into Yahoo Messenger 7.0 contact identification

Dickson, Mike

doi:10.1016/j.diin.2006.08.009

Cited by 26 publications

(5 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Instant messaging has been the subject of numerous digital forensic studies since the mid 2000's. In a series of early works, Dickson identified that artefacts of the client-based American Online Messenger version 5.5 (AIM) [16], MSN Messenger version 7.5 [36], Yahoo Messenger version 7.0 [37], and Trillian version 3.1 [38] could be recovered from the registry, user settings, and other application-specific files on the hard drive of a Windows XP machine. By applying keyword search, the author was able to recover portion of the conversation history from unstructured datasets such as memory dumps, slack space, free space, and swap files in plain text, even with the absence of chat logging.…”

Section: Literature Reviewmentioning

confidence: 99%

Windows Instant Messaging App Forensics: Facebook and Skype as Case Studies

et al. 2016

View full text Add to dashboard Cite

Instant messaging (IM) has changed the way people communicate with each other. However, the interactive and instant nature of these applications (apps) made them an attractive choice for malicious cyber activities such as phishing. The forensic examination of IM apps for modern Windows 8.1 (or later) has been largely unexplored, as the platform is relatively new. In this paper, we seek to determine the data remnants from the use of two popular Windows Store application software for instant messaging, namely Facebook and Skype on a Windows 8.1 client machine. This research contributes to an in-depth understanding of the types of terrestrial artefacts that are likely to remain after the use of instant messaging services and application software on a contemporary Windows operating system. Potential artefacts detected during the research include data relating to the installation or uninstallation of the instant messaging application software, log-in and log-off information, contact lists, conversations, and transferred files.

show abstract

Section: Literature Reviewmentioning

confidence: 99%

Windows Instant Messaging App Forensics: Facebook and Skype as Case Studies

et al. 2016

View full text Add to dashboard Cite

show abstract

“…These files contained splash screens with timestamps, which are used to load the settings of the applications. The file vrserver.txt contained the connections to lighthouse and also contained the logs of adding the base stations (Table IV, 17). The file user vr vive.vcfg contained the username associated with the Steam account, while the localconfig.vdf file contained the actual or given name of the Steam user.…”

Section: A Steam Artifactsmentioning

confidence: 99%

Forensic Analysis of Immersive Virtual Reality Social Applications: A Primary Account

Yarramreddy

Gromkowski

Baggili

2018

2018 IEEE Security and Privacy Workshops (SPW)

View full text Add to dashboard Cite

Our work presents the primary account for exploring the forensics of immersive Virtual Reality (VR) systems and their social applications. The Social VR applications studied in this work include Bigscreen, Altspace VR, Rec Room and Facebook Spaces. We explored the two most widely adopted consumer VR systems: the HTC Vive and the Oculus Rift. Our tests examined the efficacy of reconstructing evidence from network traffic as well as the systems themselves. The results showed that a significant amount of forensically relevant data such as user names, user profile pictures, events, and system details may be recovered. We anticipate that this work will stimulate future research directions in VR and Augmented Reality (AR) forensics as it is an area that is understudied and needs more attention from the community.

show abstract

“…Al Mutawa et al [1] have examined the forensic artifacts created by Facebook's instant messaging service, and describe a process for recovering and reconstructing the artifacts left on a computer hard drive. Dickson [4,5] has developed forensic techniques for recovering artifacts from AOL Instant Messenger and Yahoo Messenger.…”

Section: Windows 8x Artifactsmentioning

confidence: 99%

Windows 8.x Facebook and Twitter Metro App Artifacts

Deb

2016

IFIP Advances in Information and Communication Technology

View full text Add to dashboard Cite

The release of Windows 8.x for personal computers has increased user appetite for metro apps. Many social media metro apps are available in the Windows Store, the installation of which integrates social media platforms directly into the operating system. Metro applications enable social media platforms to be accessed without an Internet browser. The increased demand for metro apps has turned out to be a gold mine in digital forensic investigations. This is because, whenever an app is executed within an operating system, evidentiary traces of activities are left behind. Hence, it is important to locate and analyze evidentiary traces in Windows 8.x personal computer environments. This chapter focuses on the forensic analysis of two widely-used personal computer based, social media metro apps-Facebook and Twitter. Experiments were performed to determine if the activities piloted via these metro apps could be identified and reconstructed. The results reveal that, in the case of Facebook and Twitter metro apps, potential evidence and valuable data exist and can be located and analyzed by digital forensic investigators.

show abstract

An examination into Yahoo Messenger 7.0 contact identification

Cited by 26 publications

References 0 publications

Windows Instant Messaging App Forensics: Facebook and Skype as Case Studies

Windows Instant Messaging App Forensics: Facebook and Skype as Case Studies

Forensic Analysis of Immersive Virtual Reality Social Applications: A Primary Account

Windows 8.x Facebook and Twitter Metro App Artifacts

Contact Info

Product

Resources

About