SCOPE
HOME
THE THIRD INTERNATIONAL CONFERENCE ON FORENSIC COMPUTER SCIENCE - ICoFCS 2008

Online ISBN: 978-85-65069-02-1 - Print ISSN: 1980-1114, pp 104-111

DOI: 10.5769/C2008011 and http://dx.doi.org/10.5769/C2008011


WMM - Uma ferramenta de extração de vestígios deixados pelo Windows Live Messenger


By Galileu Batista de Sousa



To download this paper, click here.

HOME     SCOPE     VENUE     COMMITTEE     GUIDELINES     AWARD     PAPERS      CONFERENCES
To return to the "Published Papers" main page, click here.
ABSTRACT

Personal communications based on Internet are growing continuously, specially using instant messaging tools, such as Windows Live Messenger - WLM. So, forensics midia content analysis needs to consider this tendency. This paper offers advances in three fronts in this scenario: add knowledgment about where artefacts are left by WLM; describes how to recover these artefacts - typically ciphered and dispersed over many points in the file system; and presents WMM, a public-domain Java tool, developed by the author and complaint to forensic methods, to automatically collect, process and show artefacts left by WLM.


KEYWORDS

Instant Messaging, WLM, MSN Messenger, Conversation content, contact list. FBox. WMM.