Thanks for the great advice. I have chatsync.DAT file which is from the userid and was created exactly at the time when the user started audio-video chatting. In the SkypeChatsyncReader we only get the name of the file with its time of creation. How to open that. I tried looking in C:UsersnameAppDataRoamingSkype and I found a folder called 'chatsync' with some mysterious folders with files ending.

Most people are aware of the SQLite databases that Skype uses and the information they contain. Another common file associated with a Skype chat is the 'chatsync' file. This file is a proprietary format and it contains some very useful information, such as the user names of the people in the chat (even group chats). In addition to the usernames of each user, each user's local (LAN) and external (WAN) IP addresses are often recorded in this file. This information can be very useful in helping identify or locating a particular user during a specific time. A chatsync file is generally created for each chat 'session'. You can select (blue check) any/all chatsync files in EnCase v6 or 'tag' them with 'chatsync' in EnCase v7 and run the below linked EnScript.
This EnScript will parse out the IP addresses and write them to the console as well as bookmark the artifacts. http://www.forensickb.com/2014/01/encase-enscript-v6-v7-to-parse-skype.html
http://www.Forensickb.com Customized EnCase EnScript development (v6 & v7) Customized Forensic Automation / Workflow Efficiency

Released:

Parser and GUI viewer of chatsync/*.dat files from the Skype profile directory

Project description

Skype stores conversations locally in two places. One is a SQLite database file, for which there are several convenient viewers out there.Another is a set of dat files in the chatsync subdirectory of the profile. The latter contain, among other things, the “removed” messagesalong with all the edits. Unfortunately, the format of those dat files does not seem to be documented anywhere, and the readers are scarce.

The package contains a crude file format parser for the dat files in the chatsync directory, created based on the hints,given by user kmn in this discussion.

As the format specification used is not official and incomplete, the parser is limited in what it can do.It may fail on some files, and on other files will only be able to extract messages partially.

In addition, the package contains a simple wx-based GUI tool for searching the log files visually.

Installation

The easiest way to install most Python packages is via easy_install or pip:

If you want to use the GUI tool, you will also need to install wxPython 2.8 or later (it is not installed automatically).

German Grammar Summary is a one-pager that summarises the most essential points of German grammar such as the use of cases, articles, reflexive pronouns and prepositions. You can print it out and use it as a quick reference guide whenever needed. Download free German language PDF files, including German grammar worksheets, German vocabulary lists, and German language printable exercises for beginners and intermediate learners. All files are FREE to download because I want to make learning German accessible to as many people as possible. For other German learning resources check Resources. German grammar exercise pdf. Online Exercises Format: PDF/HTML. Toms Deutschseite is a great resource for self-study, since it covers most of the basics, has detailed explanations (in English!) and exercises about all of the essentials. The exercises are linked at the end of each grammar topic together with an answer key.

A standalone executable version of the GUI tool for Windows can be downloaded here.

Usage

If you want to parse chatsync files programmatically, check out the SkypeChatSyncScanner and SkypeChatSyncParser classes in skype_chatsync_reader.scanner.A typical usage example is:

Then use p.timestamp, p.participants, and p.conversation to read out the messages. There convenience function parse_chatsync_profile_dir will scanthrough all the dat files in the provided chatsync dir and parse all of them (which can be parsed).

If you want to use the GUI tool, simply run the script:

which is installed into your python’s scripts directory together with the package.

Issues

This is a very crude implementation, written up in a single evening for fun. It is not meant to be production-quality software. There are numerous known and unknown issues.I do not plan to maintain this actively. Feel free to contribute via Github.

Copyright

• Copyright 2015, Konstantin Tretyakov
• MIT License
• The icon used in the single-file executable is (c) Umut Pulat, licensed under LGPL.

Release historyRelease notifications RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Hashes for skype-chatsync-reader-0.1.zip