Extract Skype Conversations

Extract Skype Conversations with Belkasoft Evidence Center

Extracting Skype conversations from a hard drive being examined may be a complex task or an easy job depending on the tools used. With Belkasoft Evidence Center, extracting Skype conversations is a quick, easy and affordable task.

The ability to extract Skype conversations (along with the ability to extract communications occurring in more than 80 instant messengers) is provided in the most affordable edition of Belkasoft Evidence Center, the Forensic IM Analyzer.

Forensic IM Analyzer delivers investigators an affordable tool allowing to extract and analyze log files, communication histories and contact databases of a wide range of instant messenger applications including Skype, AOL, ICQ, MSN and Live! Messenger, Yahoo! Messenger, RQ, Miranda, MySpace IM, SIM, QIP, QIP Infium, Trillian, AIM, Digsby, Rambler Virtus, Mail.Ru Agent, QQ, and many other instant messengers for Windows, Linux and MacOS. More than 80 applications are supported in total.

Carving Deleted Skype Logs and Extracting Skype Conversations

Forensic IM Analyzer is the most affordable edition, but not the most powerful one. The ability to carve deleted Skype logs is included with the next one up, the Professional edition. Belkasoft Evidence Center Professional offers the ability to recover deleted Skype communications, carve hard drives for deleted Skype logs and retrieve destroyed evidence. In order to engage Skype carving, click on the Carve Device button from the toolbar, then choose a source drive to carve:

Finally, you’ll need to specify the type of data to carve for. In order to carve Skype communication history, mark Skype under the Instant Messengers check box.

More information about Skype log carving is available at Carving and Live RAM analysis.

Compare editions or download the free evaluation version.

Articles

Catching the ghost: how to discover ephemeral evidence with Live RAM analysis

Many types of evidence are only available in computer’s volatile memory. However, until very recently, this additional evidence was often discarded. Approaching running computers with a “pull-the-plug” attitude used to be a standard practice, ... Read more

SSD and eMMC Forensics 2016 - Part 1

This publication continues the series started with an article on SSD forensics we published in 2012. We investigated the issues of SSD self-corrosion, demystified trimming, garbage collection and data remapping. Two years later, we ... Read more

Subscribe to our Newsletter