Archive for March, 2010

By popular demand: WebCase adds new features

Friday, March 26th, 2010

WebCase users have been asking us for three things:

  • Full page capture
  • HTML, or “source,” code capture
  • 64-bit compatibility

We’re very pleased to have just released these features in WebCase 1.9, which is available now. Current WebCase users will find their efficiency improved via full page and HTML capture functions. Meanwhile, investigators who work exclusively on 64-bit systems can now take advantage of WebCase.

Full page and HTML capture

Full page capture improves efficiency, in part, with automatic scrolling. In previous WebCase versions, investigators had to scroll manually to areas of a page that were not immediately visible on the screen. Lengthy pages such as those seen on MySpace could result in numerous screenshots. Now with one click, WebCase captures an entire web page in a single JPEG graphic file.

WebCase 1.9 also introduces the ability to copy only the web page’s HTML (Hyper Text Markup Language), or underlying “source” code, to an evidence file. Some web pages are difficult to archive properly because of the embedded code, and previous versions of WebCase required several steps to archive the code. The HTML copy function allows just one step to document the source code for later review.

To see these two new features in action, watch our video here!

64-bit compatibility

64-bit systems have the performance to process more demanding applications, such as audio and video encoding, so 64-bit compatibility is important as WebCase users move to the latest in desktop computing technology.

Finally, WebCase 1.9 now also supports Windows 7 along with Vista and XP, and adds Internet Explorer 8 to its list of supported browser versions.

We’re still working on getting the demo version available, but meanwhile, please view the video (and the others we have available) — and please sign up for our next WebCase webinar on April 1st. (No April Fool’s!)

Six Online Tools for Tracing IP Addresses

Tuesday, March 9th, 2010

Tracing IP addresses is a fundamental skill for online investigations. Several resources are available on the Internet to assist in this process. Several online resources for doing your basic IP identification include:

ARIN – American Registry of Internet Numbers
ARIN is a Regional Internet Registry (RIR) that provides services related to the technical coordination and management of Internet number resources in its respective service region. The ARIN service region includes Canada, many Caribbean and North Atlantic islands, and the United States.

Use the “Search Whois” function at  https://www.arin.net/index.html  to obtain IP registration information.

Sam Spade
Sam Spade has been in use as a tool for obtaining domain registration information for years. It has a simple Google like interface where you enter an IP address or a domain name.

http://samspade.org/
DNS Stuff
This is another website that has been around for a number of years. This website offers both free and pay for option for assisting in the identification IP addresses and other online information.

http://www.dnsstuff.com/tools/tools/
Network-Tools.com
Another website with a simple user interface to assist in IP tracing.

http://network-tools.com/
Central Ops.net
Central Ops is another website that assists with your IP tracing. One of its features “Domain Dossier” does multiple lookups on an IP address or domain.
http://centralops.net/co/
Internet Investigators Toolbar
All of these websites are easily accessible from our free to the online investigations community Internet Investigators toolbar which can be found on our website at http://veresoftware.com/index.php?page=downloads#toolbar