THE FOURTH INTERNATIONAL CONFERENCE ON FORENSIC COMPUTER SCIENCE - ICoFCS 2009
Online ISBN: 978-85-65069-03-8, Print ISSN: 1980-1114, pp 15-20
DOI: 10.5769/C2009002 and http://dx.doi.org/10.5769/C2009002
Extração de vestígios do Windows Live Messenger 2009
By Marcelo Henrique Ferreira de Medeiros, and Galileu Batista de Sousa
To download the paper, click here.
To return to the "Published Papers" main page, click here.
Windows Live Messenger - WLM - remains the most popular instant messenger on the Internet. In current version, Microsoft has changed totally the local storage cache for contact lists, in order to provide robustness and reliability. The new features, internal structures and relevant characteristics of this cache are presented in this paper. Following the steps of another tool, WMM, we present a new tool, WMM 2009, to help forensic analysts to get traces left by WLM 2009 in a fully automatic manner.1
Instant Messaging, Windows Live Messenger, MSN Messenger, Extensible Storage Engine, Conversation content, contact list. ESENT. WLM. WMM