Re: decoding konq_history

--===============0811545102==
Content-Type: multipart/alternative; 
	boundary="----=_Part_83394_2382920.1174179303848"

------=_Part_83394_2382920.1174179303848
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Thanks for the quick response... I found that link earlier, but it won't
work for what I'm trying to do (forensic analysis of a Linux box).  I'm
going to have an image of a Linux OS and will have to analyze konq_history
to see where the bad guy went and at what time he went there.  Any other
ideas?

On 3/18/07, David A. Riggs <[email protected]> wrote:
>
> On 3/17/07, Nick Newman <[email protected]> wrote:
> > I'm trying to find a way to decode the binary konq_history file, which
> > stores the history for Konqueror.  Is there any easy way (preferrably
> via
> > some program) to convert that file to plain text?
> >
>
> Type "konq_history" into Google, hit "I'm feeling lucky"... seriously.
>
> - DR
>
> --
> David A. Riggs <[email protected]>
> _______________________________________________
> Morlug mailing list
> [email protected]
> http://mailman.morlug.org/mailman/listinfo/morlug
>



-- 
"Love all, trust a few, do wrong to none." -- William Shakespeare

------=_Part_83394_2382920.1174179303848
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Thanks for the quick response... I found that link earlier, but it won&#39;t work for what I&#39;m trying to do (forensic analysis of a Linux box).&nbsp; I&#39;m going to have an image of a Linux OS and will have to analyze konq_history to see where the bad guy went and at what time he went there.&nbsp; Any other ideas?
<br><br><div><span class="gmail_quote">On 3/18/07, <b class="gmail_sendername">David A. Riggs</b> &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On 3/17/07, Nick Newman &lt;<a href="mailto:[email protected]">[email protected]</a>&gt; wrote:<br>&gt; I&#39;m trying to find a way to decode the binary konq_history file, which<br>&gt; stores the history for Konqueror.&nbsp;&nbsp;Is there any easy way (preferrably via
<br>&gt; some program) to convert that file to plain text?<br>&gt;<br><br>Type &quot;konq_history&quot; into Google, hit &quot;I&#39;m feeling lucky&quot;... seriously.<br><br>- DR<br><br>--<br>David A. Riggs &lt;<a href="mailto:[email protected]">
[email protected]</a>&gt;<br>_______________________________________________<br>Morlug mailing list<br><a href="mailto:[email protected]">[email protected]</a><br><a href="http://mailman.morlug.org/mailman/listinfo/morlug">
http://mailman.morlug.org/mailman/listinfo/morlug</a><br></blockquote></div><br><br clear="all"><br>-- <br>&quot;Love all, trust a few, do wrong to none.&quot; -- William Shakespeare

------=_Part_83394_2382920.1174179303848--

--===============0811545102==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Morlug mailing list
[email protected]
http://mailman.morlug.org/mailman/listinfo/morlug

--===============0811545102==--