Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Messenger Protocol Fragments

A script to search for protocol fragments of MSN Messenger (or MSN Live Messenger) chat. The message containing the chat is extracted and placed (where possible) into relevant bookmark folders. These protocol messages are NOT fragments of chat logs they are the remains of the actual MSN protocol messages as they appear the Internet. In many cases these exist on a machine even where chat logging has been disabled. The script was developed in conjuction with the publication of this paper: http://computerforensics.parsonage.co.uk/downloads/MSNandLiveMessengerArtefactsOfConversations.pdf

Download Now



Version: 1.0.0
Tested with:
EnCase Forensic 7.05
Developer: Paul Eric Tew
Category: Artifact

4551 DOWNLOADS

YOU MAY ALSO LIKE

Artifact

WebCacheV01.dat Internet History Decoder

This EnScript parses Internet history data from WebCacheV01.dat files. This includes the Internet history data generated by the Microsoft Internet Explorer and Edge web-browser programs.
By Simon Key
8562 Downloads
App
Artifact

ShellBags Parser

Parses recent-folder view settings maintained by the Microsoft Windows operating system.
By Simon Key
567 Downloads
App
Artifact

User Assist Registry Value Decoder

Decodes data used by the Microsoft Windows operating system to populate each user's start menu with frequently used applications.
By Simon Key
406 Downloads
App
Artifact

Windows Search Application Data Parser

This script parses data maintained by the Windows search function relating to recently-used applications and documents
By Simon Key
340 Downloads
App