Well, on first thought, since I don't know the file format, I would throw it through a hex editor. That should show all the text you need unless it's a binary file. Short of that, you could possibly try to put it on an existing installation of MACOS and IE. I would force the issue and determine the exact OS/APP parameters you are working with. Outlook Express 4 and Outlook Express 5 may look the same, but the index files for the mailbox is way different. Microsoft just wants to make our lives hard. Unless it's a security breach, maybe post the file and someone may play with it. -----Original Message----- From: Ivan [mailto:ivanat_private] Sent: Sunday, May 27, 2001 7:02 PM To: security-basicsat_private; forensicsat_private Subject: Help any MAC gurus! Hello All, I have been asked to extract the urls, timestamps etc from a "cache.waf" file on a MAC. I do not have any info on the version of the MAC OS or the version of IE it is running. What tools can be used to extract the data from this file? Thanks in Advanced Ivan
This archive was generated by hypermail 2b30 : Tue May 29 2001 - 17:20:40 PDT