Re: irc

From: Albert Lederer (albertledererat_private)
Date: Tue Jun 18 2002 - 10:53:58 PDT

  • Next message: H C: "RE: Imaging a "live" system"

    Well, Windows does not log chat sessions by itself, if that's what 
    you're hoping for.  Pretty much your only choice is to go with the log 
    files of the client.  
    
    The problem is that there are so many different IRC clients out there 
    and none store log files in a similar location.  Your best bet is to 
    analyze the client.  I know, for example, that the Windows Jabber 
    Client, which has an IRC module, keeps all of it's logfiles in the user 
    profile directory.  
    
    Other than that, I'm pretty sure you're out of luck.    
    
    Larry Porter wrote:
    
    >I was wondering if anyone can give me a little insight
    >into irc forensics. Basically what I am trying to do
    >is figure out if there are any pieces of chat sessions
    >>from IRC left on a windows box.  The only thing I can
    >think of is if someone logs their sessions, but I was
    >hoping if there maybe another place that windows
    >stores the chat sessions?  
    >
    >
    >many thanks,
    >
    >Larry Porter
    >
    >__________________________________________________
    >Do You Yahoo!?
    >Yahoo! - Official partner of 2002 FIFA World Cup
    >http://fifaworldcup.yahoo.com
    >
    >-----------------------------------------------------------------
    >This list is provided by the SecurityFocus ARIS analyzer service.
    >For more information on this free incident handling, management 
    >and tracking system please see: http://aris.securityfocus.com
    >
    >
    
    
    
    -----------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Jun 18 2002 - 17:57:27 PDT