Difference between pages "Libmsiecf" and "Hoffmann Investigations"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
(External Links)
 
(Initial stub)
 
Line 1: Line 1:
{{Infobox_Software |
+
{{expand}}
  name = libmsiecf |
+
  maintainer = [[Joachim Metz]] |
+
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
+
  genre = {{Analysis}} |
+
  license = {{LGPL}} |
+
  website = [http://libmsiecf.sourceforge.net libmsiecf.sourceforge.net] |
+
}}
+
  
The '''libmsiecf''' package contains a library and applications to read the [[Internet Explorer History File Format | MSIE Cache File]] format.
+
== External Links ==
 +
* [http://en.hoffmannbv.nl/ Official web site]
  
== History ==
+
[[Category:Service Provider]]
 
+
Libmsiecf was created by [[Joachim Metz]] in 2009, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations].
+
 
+
Libmsiecf is a rewrite of [http://sourceforge.net/projects/odessa/ pasco] with support for more recent versions of [[Internet Explorer History File Format | MSIE Cache Files]]
+
 
+
== Tools ==
+
The libmsiecf package contains the following tools:
+
* '''msiecfexport''', which exports the items stored in MSIECF files.
+
* '''msiecfinfo''', which shows the information about MSIECF files.
+
 
+
== Examples ==
+
 
+
Exporting items from an index.dat:
+
<pre>
+
msiecfexport -m items index.dat
+
</pre>
+
 
+
Exporting recovered items from an index.dat:
+
<pre>
+
msiecfexport -m recovered index.dat
+
</pre>
+
 
+
Exporting an index.dat from a Chinese Windows installation:
+
<pre>
+
msiecfexport -c windows-936 index.dat
+
</pre>
+
 
+
== External Links ==
+
* [http://code.google.com/p/libmsiecf/ Project site]
+
* [http://libmsiecf.sourceforge.net/ Old project site]
+

Latest revision as of 13:15, 9 June 2009

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

External Links