0

So I need to see histories for dozens of agents on TS. Where IE stores that, and is there any easier way then going manually to each users folder? Thanks.

Desperatuss0ccus
  • 252
  • 1
  • 4
  • 9
user202590
  • 11
  • 1
  • 3
  • 1
    IE history is one of those things that changes location with practically every version of Windows AND every version of IE. You'll most likely find it in a *.dat file *somewhere* in the user's profile, that needs a special application to be able to read it. http://www.forensicswiki.org/wiki/Internet_Explorer_History_File_Format – Ryan Ries Dec 15 '13 at 20:50

1 Answers1

1

IE histories are stored here :

%userprofile%\AppData\Local\Microsoft\Windows\History

Actually, as far as i know, there is not an easier way than going to each users folder. But this could be easily automated using powershell.

krisFR
  • 13,280
  • 4
  • 36
  • 42
  • I can't find nothing that looks like history. Can you be more specific please? Thanks a lot. – user202590 Dec 15 '13 at 19:12
  • Have you checked "show hidden files and folders" AND unchecked "hide files protected by the system OS" ? (sorry i am french my os is french, i don't know the real traduction for it) – krisFR Dec 15 '13 at 19:15