Forensic/CFReDS-Hacking Case
hacking case #21,22 mIRC artifacts
c0msherl0ck
2019. 2. 8. 07:22
https://www.cfreds.nist.gov/Hacking_Case.html
#21. A popular IRC (Internet Relay Chat) program called MIRC was installed. What are the user settings that was shown when the user was online and in a chat channel?
환경설정 파일인 ini 파일들을 추출하여 분석할 결과, 다음과 같이 mirc.ini 파일에서 user settings 관련 흔적을 찾을 수 있었다.
# 22. This IRC program has the capability to log chat sessions. List 3 IRC channels that the user of this computer accessed
