JAFAT is an assortment of tools to assist in the forensc investigation of computer systems. The tools are designed to run on several different OS platforms.
NEWS:
2012-05-10: SFT v1.1.4 Debian package for SANS SIFT has been released.
SFT v1.1.4: SFT v1.1.4 Debian package for the SANS SIFT.
2011-04-19: Safari Forensic Tools (SFT) v1.1.4 Released.
SFT v1.1.4: safari_top v1.0 and last_session v1.0 added to parse Topsites.plist and LastSession.plist files.
2011-01-22: Safari Forensic Tools (SFT) v1.1.3 Released.
2009-01-29: Safari Forensic Tools (SFT) v1.1.2 Released.
Safari Forensic Tools (SFT) v1.1.2 released.
This release has an updated version of the safari_icon program which now handles both icons.db and WebpageIcons.db files found in newer revisions of Safari v3.
2007-07-29: Safari Forensic Tools (SFT) v1.1 Released.
Safari Forensic Tools (SFT) v1.1 has just been released.
This version now includes command line utilities to parse the browser .cache files, Icon .cache files, the cache.db file, and the icon.db file.
2007-06-29: Announcing: Safari Forensic Tools (SFT).
Safari Forensic Tools (SFT) is a collection of command line utilities for analyzing files created and used by the Safari web browser.
SFT has primarily been tested on the Safari web browser for OSX, and more testing is in progress on Safari for Windows.