...
| Warning | ||
|---|---|---|
| ||
The following table relates to NetAnalysis v1.50. Further support has been added for later releases. To review the current supported browser, please visit: Supported Browsers |
| Browser / Version | Information | History | Cache | Rebuild |
Microsoft Internet Explorer v3 | Client UrlCache MMF Ver 3.2 |  | | |
Microsoft Internet Explorer v4 | Client UrlCache MMF Ver 4.7 | | | |
Microsoft Internet Explorer v5 - 8 | Client UrlCache MMF Ver 5.2 | | | |
Mozilla Firefox v1 - 2 | Mork DB and Cache Map | | | |
Mozilla Firefox v3 | SQLite and Cache Map | | | |
Flock v2 | Mozilla based browser | | | |
Orca v1 | Orca Browser | | | |
Avant v7 - 11 | Avant Browser | | | |
Netscape Communicator v4.0 - 4.08 | Little and Big Endian Versions | | | |
Netscape Communicator v4.5 - 4.8 | Little and Big Endian Versions | | | |
Netscape v6.0 - 6.2.3 | Netscape Browser | | | |
Netscape v7.0 - 7.2 | Netscape Browser | | | |
Netscape v8.0 - 8.1.3 | Netscape Browser | | | |
Netscape v9.0 - 9.0.0.6 | Netscape Browser | | | |
AOL Browser ARL File | AOL Browser | | | |
Opera v9 - 10 | Cache support in development | |  | |
Yahoo! BT Browser | Yahoo British Telecom Browser | | | |
Apple Safari Windows v3 - 4 | Cache support in development | | | |
Apple Safari Mac OSX v1 - 4 | Cache support in development | | | |
| Apple Safari XML PLIST | XML formatted PLIST | | N/A | N/A |
| Apple Safari Binary PLIST | Binary Formatted PLIST | | N/A | N/A |
Mozilla / Firefox / Netscape Bookmark | XML Bookmark File | | N/A | N/A |
...
Historically, one of the biggest confusion for users was time zones and date/time stamps. In this version, date/time stamp analysis has been improved considerably and the secondary date column has been replaced. NetAnalysis now takes DST into account rather than just applying an offset bias. It also allows the user to set the exact time zone the suspect system was set to, thereby accurately recreating the date/times. Figure 1 shows the Time Zone options page.
Figure 1
NetAnalysis will also flag and report any issues it identifies with Time Zones after the data has been imported. It will identify if the Time Zone settings are incorrectly set.
...
NetAnalysis v1.50 now supports HstEx v3 extraction files. HstEx can recover deleted browser data from a forensic image or disk. When Hstex v3 files are loaded into NetAnalysis, a new feature identifies the physical location of the internet history record on the original disk. If you right click on the status bar at this point, the physical sector offset can be copied to the clipboard. This allows the examiner to quickly navigate to that physical location in the forensic tool of choice.
Figure 2
NetAnalysis also logs the metadata from the original EnCase or FTK image.
...
In previous versions of NetAnalysis, there was a system log which recorded some limited information. In the new version, this has been replaced by an audit log. The audit log will record far more information than previously to enhance disclosure under the United Kingdom's CPIA (Criminal Procedure and Investigations Act 1996).
Figure 3
Improved Error Handling
...
Error logging can be accessed from Help » Error Reporting. If numerous errors are reported (such as with very corrupt data), the user can disable error reporting for the rest of that session. NetAnalysis will continue to log the errors to the log file. Figure 4 shows the error reporting window:
Figure 4
Improved Option Management
...