How to uncover tracks....

**Doonz** · 09-20-2005, 02:12 PM

SO someone is surfing where they shouldnt be and they buy something that "covers" thier tracks with something like internet washer pro... How else could you discover the tracks...where are the hidden areas??? Like the index.dat file with the right tools you can crack and read where the users been. Or there are temp file that dont get delete just by clicking dfelete in IE tools and options. Is there any other palces to look...or to turn it around where else should you delete to hide

Scooped · 09-20-2005, 05:14 PM

Well, you could check a few places.

First of course, being the browsers history. Next, the cookies. Then the cache. Then the temporary internet files.

If it's your computer you're monitoring, then the easiest way would be to install a keylogger.

You could also recover the deleted cookies and files, but that is taking it a little bit far.

**Resolution** · 09-20-2005, 05:32 PM

A packet analyzer (sniffer) would also work depending on your situation.

Scooped · 09-20-2005, 09:46 PM

Quote:

Originally Posted by Resolution

A packet analyzer (sniffer) would also work depending on your situation.

True. It would be a pain in the *** to use a sniffer long term though. Imagine all the rubbish you would get

.

If this does fit your situation though, I reccomend ethereal

09-20-2005, 02:12 PM	#1 (permalink)
Doonz S.W.A.T Join Date: Jun 2002 Location: Long Island Posts: 1,481 OS: WinXP, Vista, MAC 10.x	How to uncover tracks.... SO someone is surfing where they shouldnt be and they buy something that "covers" thier tracks with something like internet washer pro... How else could you discover the tracks...where are the hidden areas??? Like the index.dat file with the right tools you can crack and read where the users been. Or there are temp file that dont get delete just by clicking dfelete in IE tools and options. Is there any other palces to look...or to turn it around where else should you delete to hide __________________ Simple Wise-A%$ Techie

09-20-2005, 05:14 PM	#2 (permalink)
Scooped Member Join Date: Sep 2005 Posts: 58 OS: Triple Booting: XP/Slacky/FreeBSD	Well, you could check a few places. First of course, being the browsers history. Next, the cookies. Then the cache. Then the temporary internet files. If it's your computer you're monitoring, then the easiest way would be to install a keylogger. You could also recover the deleted cookies and files, but that is taking it a little bit far.

09-20-2005, 05:32 PM	#3 (permalink)
Resolution TSF Enthusiast Join Date: Sep 2005 Location: Louisiana Posts: 1,091 OS: FreeBSD/Win98/2000/XP	A packet analyzer (sniffer) would also work depending on your situation.