RE: Help any MAC gurus!

From: Albert Lederer (aledererat_private)
Date: Tue May 29 2001 - 05:10:20 PDT

  • Next message: Troy Larson: "RE: Registry Key LastWrite times"

    Well, on first thought, since I don't know the file format, I would throw it
    through a hex editor.  That should show all the text you need unless it's a
    binary file.  Short of that, you could possibly try to put it on an existing
    installation of MACOS and IE.
    
    I would force the issue and determine the exact OS/APP parameters you are
    working with.  Outlook Express 4 and Outlook Express 5 may look the same,
    but the index files for the mailbox is way different.  Microsoft just wants
    to make our lives hard.
    
    Unless it's a security breach, maybe post the file and someone may play with
    it.
    
    -----Original Message-----
    From: Ivan [mailto:ivanat_private]
    Sent: Sunday, May 27, 2001 7:02 PM
    To: security-basicsat_private; forensicsat_private
    Subject: Help any MAC gurus!
    
    
    Hello All,
                I have been asked to extract the urls, timestamps etc from a
    "cache.waf" file on a MAC.
    I do not have any info on the version of the MAC OS or the version of IE it
    is running. What tools can be used to extract the data from this file?
    
    Thanks in Advanced
    Ivan
    



    This archive was generated by hypermail 2b30 : Tue May 29 2001 - 17:20:40 PDT