It's not encase but it is a script...
Lifted straight from http://www.perldoc.com/cpan/Netscape/History.html
#!/usr/bin/perl -w
use Netscape::History;
use Date::Format;
use strict;
my $history;
my $url;
$history = new Netscape::History;
while (defined($url = $history->next_url() ))
{
print "$url :\n";
print " First : ",
ctime($url->first_visit_time());
print " Last : ", ctime($url->last_visit_time());
print " Count : ", $url->visit_count(), "\n";
print " Expire : ", $url->expire(), "\n";
print " Title : ", $url->title(), "\n";
}
$history->close();
Mark
> -----Original Message-----
> From: Manuel Beltran [mailto:MBeltranat_private]
> Sent: Tuesday, August 07, 2001 10:50 PM
> To: Forensics
> Subject: Netscape History file
>
>
> Hello Cyber-Sleuths,
>
> The Netscape history file keeps track of places you have
> been, including
> dates. I have found an entry in the history file that is
> very significant
> to my case, but Netscape seems to have marked it as expired
> and I cannot get
> the NS History viewer to display the entry. I can see it
> with strings,
> gHex, BinText, etc, but I cannot get the date info I need
> this way since the
> date field is in binary.
>
> Is there a viewer that anyone knows of that will let me
> review the entire
> contents of the history file (netscape.hst - Win32,
> history.dat - Unix), in
> its entirety? Seems to me that this would be a very common
> tool to have.
> We have become spoiled by the lack of privacy in IE and ease
> with which this
> info can be had, so I suspect that there are not too many
> tools out there
> for NS. An EnCase escript would be nice :)
>
> Thanks for your help.
>
> Manuel Beltran
> OnlineSecurity
>
>
> -----------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management
> and tracking system please see: http://aris.securityfocus.com
>
>
-----------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Thu Aug 09 2001 - 12:45:17 PDT