ComputerSecurityStudent (CSS) [Login] [Join Now]

|FORENSICS >> Web Browsing >> Current Page |Views: 15508


{ Viewing Past Internet Searches }

Section 0. Background Information
  • MyLastSearch utility scans the cache and history files of your Web browser, and locate all search queries that you made with the most popular search engines (Google, Yahoo and MSN) and with popular social networking sites (Twitter, Facebook, MySpace).
  • The search queries that you made are displayed in a table with the following columns: Search Text, Search Engine, Search Time, Search Type (General, Video, Images), Web Browser, and the search URL.


Section 1. Play Virtual Machine
  1. Play the WindowsVulnerable01 virtual machine. (See Below)
    • Note: For those of you that don't have access to class material, this can be Windows XP, 2000, 2003 and 7.


  2. Login as administrator
    • Note:  If you do not have access this class or VM, then make sure your user account has administrative privileges that allow you to install software.



Section 2. Download and Install
  1. Start your Internet Explorer Web Browser


  2. Go to link -->


  3. Click Save


  4. Save As
    • Save to C:\tools\
    • Note:  If the tools directory does not exist, then create it or name it whatever you want.


  5. Click Open Folder


  6. Extract
    • Right Click on
    • Select Extract All...


  7. Select Next


  8. Select Next


  9. Click Finished



Section 3. Create Some Web History.
  1. Open Up Internet Explorer.


  2. Let's Create some "search" history



Section 4. MyLastSearch.exe
  1. Start MyLastSearch.exe
    • Double click on MyLastSearch.exe


  2. Click Run


  3. View Your Search Results
    • Note: Do you see similar search results for the string "casey anthony chloroform" and "hack windows xp service pack 2"?


  4. Let's save the results to a CSV file.
    • Step 1:
      • Click On: Options --> Add Header Lin to CSV/Tab-Delimited File


    • Step 2:
      • Click On: Edit --> Select All


    • Step 3:
      • Click On: Edit --> Select All


    • Step 4:
      • Click On: File --> Save Selected Items


    • Step 5:
      • Save In: C:\tools\mylastsearch
      • File Name: search-YYYYMMDD (e.g., search-20111012)
      • Save as type: Comma delimited text file (*.csv)


  5. Let's View the saved file
    • Open a Window's Explorer
    • Go to C:\tools\mylastsearch
    • Right click on search-YYYYMMDD.csv file and click open


  6. Proof of Lab
    • Highlight the "casey anthony chloroform" record.
    • Cut and Paste a screen print into a word document and upload to Moodle.


Section: Proof of Lab5
  1. Cut and Paste a screen shot found in Section 4, Step 6 in a word and upload to Moodle. 


Help ComputerSecurityStudent
pay for continued research,
resources & bandwidth