hacking case #21,22 mIRC artifacts
Forensic/CFReDS-Hacking Case2019. 2. 8. 07:22
https://www.cfreds.nist.gov/Hacking_Case.html
#21. A popular IRC (Internet Relay Chat) program called MIRC was installed. What are the user settings that was shown when the user was online and in a chat channel?
환경설정 파일인 ini 파일들을 추출하여 분석할 결과, 다음과 같이 mirc.ini 파일에서 user settings 관련 흔적을 찾을 수 있었다.
# 22. This IRC program has the capability to log chat sessions. List 3 IRC channels that the user of this computer accessed
'Forensic > CFReDS-Hacking Case' 카테고리의 다른 글
| hacking case #26, pattern matching using grep (keyword search) (0) | 2019.02.10 |
|---|---|
| hacking case #23~25 network packet analysis (0) | 2019.02.08 |
| hacking case #20, outlook express artifacts in WinXP (0) | 2019.02.08 |
| hacking case #19, pattern matching using grep (0) | 2019.02.08 |
| hacking case #17,18 email account & news server (0) | 2019.02.04 |
