Table of Contents
Overview
Microsoft Internet Explorer introduced a number of new security and privacy features in version 8. One of these new features was InPrivate Filtering. InPrivate Filtering helps prevent the web sites a user visits from automatically sending details about the visit to other content providers.
...
When performing a forensic examination of INDEX entries from Internet Explorer, you may come across numerous PrivacIE Type entries. These entries are URL records for third-party content providers. If the user has InPrivate filtering on, the PrivacIE INDEX.DAT stores the URLs to third party content. They are not InPrivate browsing records. InPrivate Filtering helps prevent website content providers from collecting information about sites the user has visited. For example, the Digital Detective web sites use Google Analytics to track information about visitors to our sites. Google tracks the data and provides webmasters with analytical tools to review the results. If you switch InPrivate filtering on and visit http://www.digital-detective.co.uknet, you will find two entries in the PrivacIE INDEX which get generated from the visit.
...
The first entry is a web bug which takes the Google Analytic information as a command line parameter. The second entry is a Google Analytic script.
PrivacIE entries also have a portion of the URL removed and replaced with an asterisk as can be seen in the figure above.
...