|
|
Introduction to NetAnalysis
Internet History
The forensic examination and analysis of user
activity on the Internet can be the pivotal point of any
case. With the increase in the use of computers by
paedophiles and other criminals who commit crime on the
Internet, it is vital for a forensic investigator to be able
to extract this data and analyse it quickly and present the
evidence in an understandable format.
In use by Law Enforcement agencies around the world, this
tool is ideal for the analysis of the internet history data!
Some other forensic utilities only offer the ability to
print the data, which can be many thousands of URLs. How do
you sift through all that data, identifying the all
important evidence? The answer is NetAnalysis! Powerful
searching, filtering and evidence identification with
targeted evidence presentation.
Viewing Cache Data
The Offline Cache viewer is a very powerful feature -
NetAnalysis will automatically rebuild HTML web pages from
an extracted cache, automatically adding the correct
location of the graphics allowing you to view the page as
the suspect did. NetAnalysis also allows you to easily view
JPEG and other pictures that have been viewed by the
suspect, straight from the cache!
The offline viewer can also be used as a viewer for forensic
software such as Encase and iLook. It is a fast, sleek
offline HTML viewer which supports Flash Movies, Graphics
formats and various plug-ins to view PDF and Office
Documents.
Auto Investigate Feature
NetAnalysis also has a unique feature to quickly identify
possible child pornography sites, search criteria typed by
the user, passwords and usernames and access to online
storage.
NetAnalysis will automatically filter out possible search
criteria. This allows you to separate this vital evidence
and present it as a separate exhibit. How can the suspect
claim he/she stumbled across the pictures by accident if you
have pages and pages of search criteria looking for that
material.
Extraction From Unallocated Space
Another unique feature is the ability to extract Internet
History from Unallocated Space. NetAnalysis comes with an
Extractor designed to extract deleted history from
Unallocated Space, Swap Files, File Slack, Unused Disk
Space, Flat File Images, DD Images and any binary file that
is suspected of containing history. One recent case resulted
in over 22 million records being recovered.
The history extractor will also extract history records
DIRECTLY from a write protected physical or logical device.
BETA testing for direct access
to Encase Image files is currently underway and should be
available shortly.
|