The Internet Evidence Finder (IEF) searches the selected drive, folder (and sub-folders, optionally), or file (memory dumps, pagefile.sys, hiberfil.sys, etc) for Internet artifacts.

It can currently find Facebook live chat messages and page fragments, MSN/Windows Live Messenger chat, Yahoo! chat, Yahoo! Webmail chat, GoogleTalk chat, Gmail email, Limewire ver 5.3.6 Search History, Limewire.props files, IE8 InPrivate / Recovery URLs, Yahoo! Messenger Group Chat, Yahoo! Webmail email, Hotmail Webmail email, AOL Instant Messenger chat logs, Messenger Plus! chat logs, MySpace chat, Bebo chat, and non-encrypted Yahoo! Messenger chat.

Depending on the items selected, IEF creates a report containing the search results or creates individual files containing the data found. Get Internet Evidence Finder and take it for a spin to see what it can actually do for you!

Limitations:

· Up to 20 items per selected search will be saved to file(s)

What's New in This Release: [ read full changelog ]

· New, simplified Graphical User Interface
· 11 new searches for grand total of 30 artifacts IEF can search for
· The file system is now also searched instead of just a sector level search
· Can search Unallocated Clusters only, optionally including file slack space
· On NTFS drives, the MFT (Master File Table) is searched for resident deleted files
· All recovered data outputs to a report case folder now and viewed with the IEF Report Viewer, full report can be created or data exported to multiple formats
· Yahoo! Messenger existing log files are now parsed without requiring usernames
· Yahoo! Messenger chat log validation has been improved, with support for date ranges and message text filtering
· The compressed data in Hiberfil.sys files is decompressed on-the-fly during searches making it easy to recover artifacts within these files
· 5 total search functions (Quick, Full, Unallocated Only, Full – Sector level, and Files/Folders)
· Major re-write of most old searches and program code to imp...