Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Forensic analysis of the ESE database in Internet Explorer 10
Halmstad University, School of Information Science, Computer and Electrical Engineering (IDE).
Halmstad University, School of Information Science, Computer and Electrical Engineering (IDE).
2013 (English)Independent thesis Basic level (degree of Bachelor), 10 credits / 15 HE creditsStudent thesis
Abstract [en]

With Internet Explorer 10, Microsoft changed the way of storing web related information. Instead of the old index.dat files, Internet Explorer 10 uses an ESE database called WebCacheV01.dat to maintain its web cache, history and cookies. This database contains a wealth of information that can be of great interest to a forensic investigator. This thesis explores the structure of the new database, what information it contains, how it behaves in different situations, and also shows that it is possible to recover deleted database records – even when the InPrivate browsing mode has been used.

Place, publisher, year, edition, pages
2013. , 57 p.
Keyword [en]
WebCacheV01.dat, forensics, ESE, IE10, Internet Explorer, JETBlue, browsing history, carving, InPrivate, wdsCarve
National Category
Computer Systems
Identifiers
URN: urn:nbn:se:hh:diva-23248OAI: oai:DiVA.org:hh-23248DiVA: diva2:635743
Subject / course
Computer science and engineering
Supervisors
Examiners
Available from: 2013-07-09 Created: 2013-07-05 Last updated: 2013-07-09Bibliographically approved

Open Access in DiVA

fulltext(1696 kB)4943 downloads
File information
File name FULLTEXT02.pdfFile size 1696 kBChecksum SHA-512
56b6268ef38ede4bb8ee3fb5d5a18f0dc0e9b460fe0ec71e683a2171e07a8aa74f57883df300188bde1098c758854f99c563dded28e0e8a4543ab1d791a5859b
Type fulltextMimetype application/pdf

By organisation
School of Information Science, Computer and Electrical Engineering (IDE)
Computer Systems

Search outside of DiVA

GoogleGoogle Scholar
Total: 4943 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

urn-nbn

Altmetric score

urn-nbn
Total: 2574 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf