Doug
26-08-2008, 05:00 PM
Hi Guys,
I am looking for some information relating how Internet Explorer interacts with protected storage.
Extensive 'googling' has only turned up multiple tools for reading this data but no solid information about how it works, exactly what is stored or even in what format it is stored in!
Ideally I am after a tech sheet that details how IE uses protected storage showing where the data is stored, in what format and what features of IE use protected storage, what needs to be turned on in IE to make use of PS, and what evidence can be gathered from PS.
So far I have come up with the following facts that I believe are correct but feel free to correct me if I am wrong here!
- Auto complete needs to be turned on in order for IE to save data to protected storage
- The sort of stuff that gets stored are passwords, autocomplete entries like email addresses etc
- Once accessed you will be able to retrieve passwords, usernames and anything else that is typically stored by auto complete
Am I correct on the above statements? Anything more to add?
I appreciate the help guys. Any links to papers or documents where I can find out more information would be more than helpful :D
I am looking for some information relating how Internet Explorer interacts with protected storage.
Extensive 'googling' has only turned up multiple tools for reading this data but no solid information about how it works, exactly what is stored or even in what format it is stored in!
Ideally I am after a tech sheet that details how IE uses protected storage showing where the data is stored, in what format and what features of IE use protected storage, what needs to be turned on in IE to make use of PS, and what evidence can be gathered from PS.
So far I have come up with the following facts that I believe are correct but feel free to correct me if I am wrong here!
- Auto complete needs to be turned on in order for IE to save data to protected storage
- The sort of stuff that gets stored are passwords, autocomplete entries like email addresses etc
- Once accessed you will be able to retrieve passwords, usernames and anything else that is typically stored by auto complete
Am I correct on the above statements? Anything more to add?
I appreciate the help guys. Any links to papers or documents where I can find out more information would be more than helpful :D