Extract Skype Conversations

Extract Skype Conversations with Belkasoft Evidence Center

Extracting Skype conversations from a hard drive being examined may be a complex task or an easy job depending on the tools used. With Belkasoft Evidence Center, extracting Skype conversations is a quick, easy and affordable task.

The ability to extract Skype conversations (along with the ability to extract communications occurring in more than 80 instant messengers) is provided in the most affordable edition of Belkasoft Evidence Center, the Forensic IM Analyzer.

Forensic IM Analyzer delivers investigators an affordable tool allowing to extract and analyze log files, communication histories and contact databases of a wide range of instant messenger applications including Skype, AOL, ICQ, MSN and Live! Messenger, Yahoo! Messenger, RQ, Miranda, MySpace IM, SIM, QIP, QIP Infium, Trillian, AIM, Digsby, Rambler Virtus, Mail.Ru Agent, QQ, and many other instant messengers for Windows, Linux and MacOS. More than 80 applications are supported in total.

Carving Deleted Skype Logs and Extracting Skype Conversations

Forensic IM Analyzer is the most affordable edition, but not the most powerful one. The ability to carve deleted Skype logs is included with the next one up, the Professional edition. Belkasoft Evidence Center Professional offers the ability to recover deleted Skype communications, carve hard drives for deleted Skype logs and retrieve destroyed evidence. In order to engage Skype carving, click on the Carve Device button from the toolbar, then choose a source drive to carve:

Finally, you’ll need to specify the type of data to carve for. In order to carve Skype communication history, mark Skype under the Instant Messengers check box.

More information about Skype log carving is available at Carving and Live RAM analysis.

Compare editions or download the free evaluation version.

Articles

"Does your DFIR tool have substantial updates?"

In his new article, Brett Shavers from DFIR.training talks about new features of Belkasoft Evidence Center 9.7. He notes that "BEC’s v9.7 update adds quite a few artifacts that some suites don’t even try to examine". He overviews the most ... Read more

Capturing RAM Dumps and Imaging eMMC Storage on Windows Tablets

While Windows desktops and laptops are relatively easy to acquire, the same cannot be said about portable Windows devices such as tablets and convertibles (devices with detachable keyboards). Having no FireWire ports and supplied with a limited ... Read more

Subscribe to our Newsletter