I am a big fan of Netanalysis, way back when I used to use IEF for all the internet chat etc. and Netanalysis for the browser stuff. Even though IEF now has good browser support I still reach for Netanalysis, mainly because I am used to it I guess but I find it suits my work flow better especially if I want to dig in with compound queries being able to write these out in SQL is really useful.
I haven't needed these for a while but FoxAnalysis and ChromeAnalysis used to be great at picking up some of the (Sqlite based) slack from the other tools:
http://forensic-software.co.uk/ChromeAnalysis.aspx
↧