Skype Forensic

Description
Skype is a desktop application that enables voice and video calls, instant messaging, file transfers, and screen sharing between users.


Registry Keys
HKEY_CURRENT_USER\Software\Skype


File Locations
C:\Documents and Settings\[Profile Name]\Application Data\Skype\[Skype User]
C:\Documents and Settings\[Profile Name]\AppData\Roaming\Skype\[Skype User]


Research Links
https://docs.google.com/viewer?url=http://www.lpcforensic.it/public_html/yabbfiles/Attachments/SkypeLogFileAnalysis.pdf
http://nickfurneaux.blogspot.com/2010/03/skype-chat-carver-from-ram-skypeex.html
Subpoena Contact – http://search.org/programs/hightech/isp/default.asp#207


Forensic Programs of Use
Skype Log View - http://www.nirsoft.net/utils/skype_log_view.html
Skype Parser - http://redwolfcomputerforensics.com/index.php?option=com_content&task=view&id=42&Itemid=55
Skype Analyzer – http://belkasoft.com/bsa/en/Skype_Analyzer.asp
SkypeAlyzer – http://www.sandersonforensics.com/content.asp?page=440