PAPERS
HOME     SCOPE     VENUE    COMMITTEE     GUIDELINES    AWARD     PAPERS      CONFERENCES
THE FOURTH INTERNATIONAL CONFERENCE ON FORENSIC COMPUTER SCIENCE - ICoFCS 2009 

Online ISBN: 978-85-65069-03-8, Print ISSN: 1980-1114, pp 15-20

DOI: 10.5769/C2009002 and http://dx.doi.org/10.5769/C2009002


Extração de vestígios do Windows Live Messenger 2009

By Marcelo Henrique Ferreira de Medeiros, and Galileu Batista de Sousa


To download the paper, click here.
To return to the "Published Papers" main page, click here.
ABSTRACT

Windows Live Messenger - WLM - remains the most popular instant messenger on the Internet. In current version, Microsoft has changed totally the local storage cache for contact lists, in order to provide robustness and reliability. The new features, internal structures and relevant characteristics of this cache are presented in this paper. Following the steps of another tool, WMM, we present a new tool, WMM 2009, to help forensic analysts to get traces left by WLM 2009 in a fully automatic manner.1


KEYWORDS

Instant Messaging, Windows Live Messenger, MSN Messenger, Extensible Storage Engine, Conversation content, contact list. ESENT. WLM. WMM