This is the third version of InternetImageAudit3.vbs, a script used by me to audit a user’s temporary Internet files in investigations of inappropriate Internet usage. This script creates an HTML file which displays images from a user’s Internet Explorer cache. It also attempts to create links to movie files in the cache. The images are sorted by time-stamp and are placed into a table with the path to the files. The script can be run locally or remotely, but it must be run with administrator rights.
Changes from prior versions: This version has Date sort, row number, and movie file support. I switched to storing data in an MDB file (Access not required) to improve speed and storage of a record set. This version adds selective printing of rows. The user interface was dressed up with better dialog boxes, and finally this version is MS Vista compatible. Note however, that even the Administrator may not have the right to read other user’s profiles without changing security.
This works in my enterprise because we mandate the use of Internet Explorer, and use group policy objects to prevent the user from clearing the Internet Explorer cache. It also works quite well on checking up on where my 14 year old son has been on the Internet.
I recently showed this to a fellow IT pro who told me that I should sell it. Because most of the work was on VA time, it is not shareware.
Do not use on original drive if court action expected (get some real forensic software, instead)! Rename the attachment to .VBS.