CPT 499C lecture 16 Internet Artifacts

CPT 499C lecture 16 Internet Artifacts - Internet Artifacts...

Info iconThis preview shows pages 1–12. Sign up to view the full content.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: Internet Artifacts Slide 1 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Introduction to Internet Artifacts Internet Artifacts Slide 2 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Learning Objectives At the end of this discussion, you will be able to: Identify digital artifacts associated with Internet activity Describe the evidentiary value of internet artifacts Identify situations where evidence based on internet activity is time-critical Internet Artifacts Slide 3 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Types of activity Web browsing E-mail IM / IRC sessions Internet Artifacts Slide 4 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Browser artifacts Remember: There are many web browsing applications Each application will store information in different location For this class, we will limit discussion to Internet explorer Internet Artifacts Slide 5 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Browser artifacts Cookies Index.dat * More than one index.dat We want the one in the history.ie5 folder MORE on index.dat to follow Temporary Internet Files Internet Artifacts Slide 6 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Cookies Put on hard drive by the website Format of data variable, unlikely to be useful Cookie filename is often useful Cookie file date and time info may help establish chronology Internet Artifacts Slide 7 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Index.dat Often the most valuable item on the drive Itemized, dated record of: Website access Web-based e-mail File Downloads Search terms Others? Internet Artifacts Slide 8 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Index.dat - Considerations Can be cleaned Affected by some variables Version of Internet Explorer Browser settings Add-ins Does not directly prove intent User clicked on an innocuous link Pop-ups & redirects Internet Artifacts Slide 9 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Index.dat - Considerations Not directly viewable Need a third-party tool to view data Many free tools available Internet Artifacts Slide 10 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Index.dat Simple access ============================================= URL : http://www.mykitties.com Title : New Page 1 Hits : 17 Modified Date : 10/4/2005 9:05:35 PM Expiration Date : 10/30/2005 9:05:36 PM User Name : twedge ============================================= Internet Artifacts Slide 11 DEPARTMENT OF COMPUTER & INFORMATION TECHNOLOGY Index.dat Simple access =============================================...
View Full Document

This note was uploaded on 02/29/2012 for the course CNIT 499 taught by Professor Timwedge during the Fall '07 term at Purdue University-West Lafayette.

Page1 / 38

CPT 499C lecture 16 Internet Artifacts - Internet Artifacts...

This preview shows document pages 1 - 12. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online