Artifacts

Posts Tagged ‘chat’


Skype

Posted by:  /  Tags: , , , ,  /  Comments: 4

Author Name
Matt

Artifact Name
Skype

Description
Skype is a desktop application that enables voice and video calls, instant messaging, file transfers, and screen sharing between users.

Registry Keys
HKEY_CURRENT_USER\Software\Skype

File Locations
C:\Documents and Settings\[Profile Name]\Application Data\Skype\[Skype User]

C:\Documents and Settings\[Profile Name]\AppData\Roaming\Skype\[Skype User]

Research Links
https://docs.google.com/viewer?url=http://www.lpcforensic.it/public_html/yabbfiles/Attachments/SkypeLogFileAnalysis.pdf

http://nickfurneaux.blogspot.com/2010/03/skype-chat-carver-from-ram-skypeex.html

Subpoena Contact – http://search.org/programs/hightech/isp/default.asp#207

Forensic Programs of Use
Skype Log View – http://www.nirsoft.net/utils/skype_log_view.html

Skype Parser – http://redwolfcomputerforensics.com/index.php?option=com_content&task=view&id=42&Itemid=55

Skype Analyzer – http://belkasoft.com/bsa/en/Skype_Analyzer.asp

SkypeAlyzer – http://www.sandersonforensics.com/content.asp?page=440