I’ve covered a number of high- end, professional quality forensics computer applications here previously – including SForensics Beta. Which, rightfully deserves the description – “professional”. Generally, this type of application requires an in-depth study, and considerable practice, in order to obtain the best results. Decidedly, not for the average user.
But, here’s a little freeware application – History Viewer – which doesn’t approach the robustness of SForensics Beta – but nevertheless, will let you take a peek at various Window’s histories – as illustrated in the following screen capture.
Click on any graphic to expand.
I’ll wager that you’ve not yet seen the contents of your Windows Index.dat file. Not a problem with History Viewer up and running. Some entries in the following graphic have been blacked out for personal security reasons.
The information generated by the application is of such a personal nature that I’m very limited in posting screen shots. The following graphic illustrates the application’s ability to capture and display USB storage history.
With this feature, you will have the ability to chastise those who have connected a USB drive without your permission.
Installation fair warning.
System requirements: Windows XP, Vista, Win 7 ( 32 and 64 bit)
Download at: Download Crew
History Viewer is really a simple tool and, I’m not convinced that “Forensics” is appropriate in describing its capabilities. But, it does have value as a quick report tool if you’re interested in scanning a machine for past usage by you – or, other users with access to the machine.
A useful tool for techies perhaps, who run into massively infected machines where a user makes the common disclaimer – I never surf porn sites.
Note: I’ve come across references which indicate that this application “may” contain malware. This, from some major sites which should know better. Tools of this nature often trigger AVs – since they operate in a way that mimics malware.
The VirusTotal analysis of this file follows –