| Author | Message | ||
     Ian Scrivens Username: investigator Registered: N/A |
The following was discovered in the index.dat file. My understanding is that this shows that another url has redirected the user to the site www.faceparty.com. I would appreciate any ones views. REDR----á—••€/~http://www.faceparty.com/•–• | ||
| Jimmy Weg Username: jw Registered: 7-2006 |
Server side REDR entries in an index.dat provide the URL from which the browser was redirected. | ||
| Timothy O'shea Username: hitbackharder Registered: N/A |
If this is the only piece of information within the Forensic examination I would suggest that it has been intentionaly placed there to incriminate. There would be other indicators on the hard drive that would show when this site had been accessed. Your basic tools such as WinSpy would show you and even Windows itself have tools that would show you more information. This means nothing without other entries. REDR only means that that the user has visited an URL that in turns points them to a different URL. |