Welcome to computer forensic portal - your online resources to all computer foreniscs
 
Knowledge Articles
Books Database
Legal Cases
Forensic Dictionary
PDF documents
Web Resources
FAQ

 

Cookie View
Bintext
DumpAutoComplete
Belkasoft Forensic Studio
SIW (System Information)
Event Log Explorer
Wireshark
Advanced Mailbox Processor
IECacheList Lite
Irfan View
Protected Storage Explorer

 

  Home > Knowledge Articles > TotalRecall

TotalRecall

Software Name: Totalrecall

License: FREE

Version: Nil

File Size: 1,342kb

Can be downloaded at: http://www.janusware.com/fetch.php?page=212,2

A free and handy software tool to use, Totalrecall retrieves IE data from the user’s computer which allows you to view user’s activities. It searches for url visits, history, cookies, favourites added.

Running it is simple with just a click of the button. It will automatically lead you to the directory where IE data is stored and you just have to click open to start the analysing.


(Click on image to view bigger version)

However, the interface needs to be further improved. Although the icons are a convenient way to execute the process, but the icons are unclear as to what it is used for. Sometimes the tooltip for the button does not appear so you probably have to try clicking on all the buttons to see what it does. If you find it a hassle, finding what you want on the menu will be much easier.


Buttons are unclear so probably have to try clicking all of it

(Click on image to view bigger version)


List of all IE activities, cache files downloaded by the computer.

(Click on image to view bigger version)


Search for all cookies list

(Click on image to view bigger version)

Other than searching for internet activity, Totalrecall is also able to search for links to recent documents and folders and temporary files not erased.


Finds temporary files that are not erased

(Click on image to view bigger version)

We reckon that the search for links of recent documents and folders was not functioning as the whole application hanged while running the process. Eventually, we have to force shut the whole application.

Overall, this software is still worth a try but more updates needed to make this a full-fledge software.

Back to Top

 

© 2009
Computer Forensics Portal
All Rights Reserved

Disclaimer | Privacy Policy

Home | Contact | Sitemap

Knowledge Articles | Books Database | Legal Cases | Forensic Dictionary | Web Resources | Frequently Asked Questions