Difference between pages "Libmsiecf" and "User:Microq"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(History)
 
m (Creating user page with biography of new user.)
 
Line 1: Line 1:
{{Infobox_Software |
 
  name = libmsiecf |
 
  maintainer = [[Joachim Metz]] |
 
  os = [[Linux]], [[FreeBSD]], [[NetBSD]], [[OpenBSD]], [[Mac OS X]], [[Windows]] |
 
  genre = {{Analysis}} |
 
  license = {{LGPL}} |
 
  website = [http://libmsiecf.sourceforge.net libmsiecf.sourceforge.net] |
 
}}
 
  
The '''libmsiecf''' package contains a library and applications to read the [[Internet Explorer History File Format | MSIE Cache File]] format.
 
 
== Tools ==
 
The libmsiecf package contains the following tools:
 
* '''msiecfexport''', which exports the items stored in MSIECF files.
 
* '''msiecfinfo''', which shows the information about MSIECF files.
 
 
== Examples ==
 
 
Exporting items from an index.dat:
 
<pre>
 
msiecfexport -m items index.dat
 
</pre>
 
 
Exporting recovered items from an index.dat:
 
<pre>
 
msiecfexport -m recovered index.dat
 
</pre>
 
 
Exporting an index.dat from a Chinese Windows installation:
 
<pre>
 
msiecfexport -c windows-936 index.dat
 
</pre>
 
 
== History ==
 
Libmsiecf was created by [[Joachim Metz]] in 2009, while working for [http://en.hoffmannbv.nl/ Hoffmann Investigations].
 
 
Libmsiecf is a rewrite of [http://sourceforge.net/projects/odessa/ pasco] with support for more recent versions of [[Internet Explorer History File Format | MSIE Cache Files]]
 
 
== See Also ==
 
* [[Internet Explorer History File Format | MSIE Cache Files]]
 
 
== External Links ==
 
* [http://code.google.com/p/libmsiecf/ Project site]
 
* [http://libmsiecf.sourceforge.net/ Old project site]
 

Latest revision as of 14:22, 1 April 2010