File path in the URL field in Internet Evidence Finder


Fdog

New Member
Feb 24, 2017
15
0
#1
I have an IEF report here that a colleague of mine needed help deciphering. In the "URL" field in the Internet explorer main history, are file names and the path in which to find the files. The files are gone and just the names remain, but the odd thing is, there should be web addresses not files on the local machine , right? Kind of confused.
 

athulin

Member
Experienced Member
Oct 18, 2007
734
Ratings
11
18
#2
Fdog said:
I have an IEF report here that a colleague of mine needed help deciphering. In the "URL" field in the Internet explorer main history, are file names and the path in which to find the files. The files are gone and just the names remain, but the odd thing is, there should be web addresses not files on the local machine , right?
Right? Why? I mean, URLs can be file names. file:// is obvious possibility, but you can have anything here. I've seen URLs used with Java libraries that use URLs like zip: // foo.zip/file.txt (foo.zip is the archive, file.txt is a file inside that archive).

What scheme do these URLs have?

I can think of at least another possibility, though.
 

Fdog

New Member
Feb 24, 2017
15
0
#3
I thought the URL field was for the web address not for what was downloaded from it. Other reports I have seen show the website that was visited. Some say it's a text file, but it tells what site it came from.
 

About us

  • Our community began in 2004. Since this time, we have grown to have over 29,000+ members within the DFIR & Cyber Security community.

    We are happy to announce that this forum is now under new ownership with the goal to once again become the main Digital Forensics Forum on the internet for DFIR, OSINT and Cyber Security.

    If you can think of ways to help us improve, please let us know.

    We pride ourselves on offering unbiased, critical discussion among people of all different backgrounds.

    We are working every day to make sure our community is one of the best.

Quick Navigation

User Menu