CacheBack

Why are people using CacheBack?

CacheBack® is the leading forensic Internet cache and history analysis tool on the market today that supports all five (5) top browsers. Web pages are easily rebuilt offline by the simple click of the mouse which allows evidence to be presented "in its original state" thereby offering a more visual impact to courts and jurors.

Government and law enforcement agencies turn to CacheBack to quickly rebuild cached web pages, locate and identify photographic evidence, and comb through complex Internet histories. CacheBack has also become an indispensable tool for generating compelling visual reports, criminal activity timelines, and uncovering probative artifacts for criminal proceedings.

CacheBack is fast becoming the tool of choice to support investigations involving or revealing child exploitation offences, terrorism, criminal premeditation, social networking, crimes against persons, corporate fraud, and theft.

This second generation version of CacheBack features proprietary Link Analysis technology that quickly identifies relationships between History URLs and hyperlinks embedded in cache web pages. Pre-defined and user-definable SQL queries greatly increase performance which is critical in examining hundreds of thousands of records.

CacheBack® also accurately displays datestamps in user-selectable Time Zones (system-clock independent) which simplifies analysis for multi-jurisdiction based investigations.

GENERAL HIGHLIGHTS
1.	Rebuild cached web pages and examine Internet histories for Internet Explorer (ver. 5-8), Firefox (ver. 2-3), Opera (ver. 9-10), Safari (ver. 3-4), and Google Chrome (ver. 1-5). NOTE: Safari 4 is only partially supported at this time (cache using the Webpage Previews folder).
2.	View cached web pages and pictures in a single consolidated thumbnail gallery making it easy to zero in on artifacts of interest.
3.	Comb through complex histories and large cache repositories using the powerful multi-tabbed, multi-functional WYSIWYG interface.
4.	Combine the built-in Query Manager window, Quick Queries and compound query filtering options to drill down efficiently on large datasets.
5.	Produce visually compelling, rich HTML reports of rebuilt web pages and picture evidence with valuable metadata.
6.	Publish reports to any destination folder or removable media keeping the evidence intact and portable.
7.	Display timestamps in any selected time zone and choose to observe daylight savings for any region. Completely system independent.
8.	Powerful Link Analysis to identify matches between history URLs and hyperlinks found in web pages (eg: which links might have been clicked or visited).
9.	Multiple tabbed views of the same evidence (Browser, Text, Hex, Picture, Audit and Links).
10.	** NEW IN VERSION 3: A video player tab that supports multiple video file formats including VOB, MOV, FLV, WMV, AVI, MPEG, 3GP and 3G2. Our CacheGrab® data mining tool will be updated to support Limewire downloads (e.g., pictures, movies), including the Limewire.PROPS file.
11.	** NEW IN VERSION 3: Our CacheGrab® data mining tool will be updated to support Limewire downloads (e.g., pictures, movies), as well as, collect and parse the probative Limewire.PROPS file.

ADVANCED FEATURES
1.	Use bookmarks and bookmark folders to categorize and manage evidence.
2.	Create incredibly narrowed datasets using special Host Filtering option.
3.	Import keyword lists to quickly create complex queries via the Query Builder.
4.	Create highly structured and compound query filters by creating queries that reference other queries.
5.	Use our powerful CacheGrab® standalone data mining tool to quickly locate and harvest cache and history artifacts. Comes in a Windows application form, as well as, an EnScript for EnCase users.
6.	Project files (.CBP) use the Microsoft Access database engine. This allows examiners the flexibility of using Microsft Access and Microsoft Excel to leverage custom reporting features and data formatting, outside of CacheBack.

SPECIAL FEATURES
1.	Full support for SQLite3 database file formats in use by Firefox and Google Chrome browsers.
2.	Supports the extraction of GNU Zip (GZip) compressed data found in browser cache data files.
3.	Pre-defined queries now available for common type investigations (eg: Child Exploitation, Web Mail, Social Networks, etc.)
4.	New Quick Queries makes it easier to filter out specific data types (eg: Show Only Web Pages, Show Only History, Show Activity for Last Month, etc.)
5.	Project files (.CBP) use the Microsoft Access database engine. This allows examiners the flexibility of using Microsft Access and Microsoft Excel to leverage custom reporting features and data formatting, outside of CacheBack!
6.	Displays timestamps in any time zone using Coordinated Universal Time (UTC). Accurately applies Daylight Savings (DST) changes to "each individual timestamp" (for the selected time zone option). This is extremely important if an investigator's place of origin (city, country) is observing DST WHEN the actual timestamp evidence originated outside of DST!!
7.	Use our proprietary Photograph Aspect Ratio Differential value to dramatically create smaller, more relevant picture galleries for investigations involving photographic evidence (e.g., cases involving child exploitation). Potentially reduces datasets by 85% to dramatically increase processing time.

來源：CacheBack