NetAnalysis Tutorials
Solutions to frequently asked questions and queries about NetAnalysis:
|
Page:
Bookmarking URL Records
— As you review and analyse the data, you may identify records which are of evidential value or relevant to the particular investigation. The bookmark field is set by the forensic examiner and contains a string which can be used to identify or describe a record. The bookmark string appears in the Advanced Report and is commonly used to annotate particular records when they are of evidential value to your case.
|
|
Page:
Configuring Agency and Examiner Name in the Printed Reports
— NetAnalysis stores the name of the Forensic Scientist / Examiner and Agency information within each Workspace file. This information is displayed in Reports and Web Page Rebuilding Audit Logs. This information can be changed as desired. When NetAnalysis is first installed and run, it reads the registry to identify the Registered User and Company / Agency details for the Operating System. This information is then stored in the NetAnalysis user configuration file. As each Workspace is generated, the default values from the configuration file are read and saved to the corresponding fields in the Workspace.
|
|
Page:
Decoding Internet Explorer Cookies
— NetAnalysis has its own built-in cookie decoder. It can be activated by clicking on the Cookie Decoder button on the toolbar or from the following menu: View » Cookie Decoder.
|
|
Page:
Exporting
— Exporting data from NetAnalysis is a relatively easy process. Table 1 outlines the current export options.
|
|
Page:
Finding the Evidence
— It is important to be able to quickly identify the Internet history records that can prove your case. NetAnalysis has a number of different ways to do this:
|
|
Page:
How to Recover Mozilla Firefox Cache and Rebuild Cached Pages
— Rebuilding a web page from the data contained within a suspect's Temporary Internet Files (also known as the Cache) can be one of the strongest pieces of evidence available. NetAnalysis was the first forensic software to include the functionality for rebuilding web pages from an offline cache.
|
|
Page:
Installing a Licence Key File
— NetAnalysis can use a licence key file to activate the full functionality of the software. The licence key file is normally sent to the end user by email and is contained within a zip archive. The licence key file (netanalysis.lic) must be extracted from the zip archive and installed. In previous version of NetAnalysis, the licence key file was copied to the installation folder so that it was in the same physical location as the NetAnalysis.exe executable file. In version 1.5x and later, you must install the Licence Ley File using the Licence Key Management Utility as explained below:
|
|
Page:
Installing NetAnalysis
— The following procedure will guide you through installing NetAnalysis for the first time. Please ensure that you close all other applications before starting.
|
|
Page:
Matching Keywords with Cached File Entries
— During a forensic examination you may identify a number of relevant files in the cache belonging to Internet Explorer and wish to identify which Internet web sites the files belong to. If you have a list of cache file names, you can use the Keyword List function in NetAnalysis to match the items to the corresponding URL entries.
|
|
Page:
Practice Files
— To assist you in getting to know the NetAnalysis user interface, and to practise using the software in a safe learning environment, we have provided some sample data. Working through the examples will help you get up to speed with using our software effectively within a forensic environment.
|
|
Page:
Time Zone Configuration
— In a forensic examination, establishing the time zone from the suspect system is one of the first tasks for a forensic examiner. If this information is not established at an early stage and taken into account, then the validity of all date/time values may be brought into question due to the way operating systems and browser applications store date/time information.
|
Below are the
315 labels used in NetAnalysis v1.x
listed alphabetically.
Click on a label to see its associated content.
Labels: