![]() ![]() ![]() Special Thanks to Phillip Moore ( who suggested this script idea and also helped test it. As it seems to be initiated by Google's servers, this browser independence makes sense. This artifact has been observed at various times while testing (on Windows 8.1) in Firefox (v32.0.3), Chrome (v38.02125.101) and IE (v.16384). Interpreting this artifact can thus allow forensic analysts to date a particular search session. While it doesn't seem to occur for every search, when it does, that "ei" parameter contains an encoded Unix UTC timestamp (and other things Google only knows). I seem to be having some trouble focusing after this latest postĮver looked closely at a Google search URL and seen a weird "ei" parameter in there? ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |