By looking up the Buddy Info for the screen names, information on the individuals may be found. Buddies are organized under groups, in the following example Co-Workers and File-Sharing-Friends. The Buddy List can have numerous categories and subcategories, and is stored on both the AOL server and locally in the user-info.bag file for each screen name. Individuals with whom the suspect is frequent correspondences are organized into a Buddy List. The details for the profile are stored in an HTML file entitled under the screen name subdirectory. This will additionally allow the investigator to search for other info or other screen names associated with an individual. Individual identification information (profile) for a screen name can be obtained from a separate AIM client by selecting Buddy Info. x passwords have not been deciphered as of the time of this writing.
#Aim download buddy list free
Prior to version 5, AIM provided easy-to-decipher passwords, a free utility to decipher them can be found at Digital Detectives.
#Aim download buddy list password
Screen names installed on a given machine can be found in the registry at HKCU\Software\America Online\AOL Instant Messenger (TM)\ CurrentVersion\Users\SCREENNAME.Īdditionally, each screen name will have a subdirectory under C:\ Documents and Settings\USERNAME\Application Data\Aim\.Īssociated with each screen name is an individual password under Login\Password below the screen name registry key. Provided to both AOL users and non-users alike, AIM allows for Internet-based chatting and uses a client-and-server storage mechanism.ĪIM works off of screen names, unique identifies specific to an individual. If the suspect is logged in to an IM session elsewhere, he will likely receive a notification when the forensic copy tries to log in.ĪOL Instant Messenger (AIM) was one of the first and is still one of the most popular dedicated instant messaging services. When conducting an Instant Messenger investigation, be careful not to bring back a restored image while online. This is meant to cover the most commonly found clients. Many additional clients for global (for example, Trillian) and intra/inter-company use (for example, Sametime) are available. Additionally, if instant messaging abuse is suspected, network sniffing and/or viewing of IM proxy information (if a proxy is in place) can be fruitful.įorensic information on the most common instant communication technologies is detailed later in this chapter.
Server-based information may not be readily available and may require a subpoena to the host of the service, but client information stored locally is generally available.
Instant messaging is client-server based therefore, there is information present on both the clients locally and the server related to chats. Forensic analysis of instant messaging is threefold: identifying the handles/profiles of an individual user, identifying chat partners, and viewing chat logs. Clicking a screen name's button will display the buddies associated with that name.Instant communications today encompasses both traditional chat services such as IRC or Internet Relay Chat and dedicated Instant Messaging clients such as AOL Instant Messenger (AIM) and Microsoft Messenger. The status button of all linked names should now be displayed at top of your Buddy List.
UI changes have been introduced with respect to the way linked screen names are displayed in your Buddy List. You may turn docking on via your Settings window's Buddy List tab. Your Buddy List window can be docked to left or right of your desktop. Simply select the appropriate menu item from a Buddy List group's right mouse button contextual menu to invoke this new functionality. Sub-sorting of Buddy List groups has been implemented in this build. You can do this via your Settings window's Style tab. The picker, located next to Help menu on your Buddy List, includes 10 colors, including the default orange color.Īnother new feature gives you the ability to change the style of your Buddy List's groups and screen names. The application now features a color picker that allows you to change the color of Buddy List and other related window elements. There are UI changes and new features in this build:
It's got some new features that are worth checking out. You should probably use that if you're comfortable with using beta software. The newest beta version is 6.1.16.1 and it works with the latest adhack.
0 kommentar(er)
