An examination into MSN Messenger 7.5 contact identification

Abstract

With the advent of new legislation in the United Kingdom-as well as several high-profile criminal cases-the issue of Internet grooming has been the subject of much recent focus. Of particular interest to the forensic examiner is the ability to trace back from a known suspect's computer system to identify contact with his alleged victims. Specifically, when an allegation of grooming is made one of the first things the examiner should do is determine that the suspect's computer system had been used to contact the informant's account in the first place, thereby not only providing a strong evidential link between the victim and the suspect but also demonstrating that the suspect was responsible for that contact and not some third party who may have taken control of the suspect's chat account. This article demonstrates some methods of proving such a link where the suspect and victim have been in contact on the MSN Messenger chat service.