MultiLog

Download MultiLog

MultiLog (including for deployments)

MultiLog runs in one of two modes: 'researcher mode' or 'deployment mode'. You should use 'researcher mode' to install and run multiple logging applications, configure log filtering and obfuscation, observe real-time event streams, and save configuration files ready for deployment. The MultiLog software is free to download and use for non-commercial and research purposes. The software downloaded from this website is provided 'as is' without warranty of any kind. We make no warranty the software will be error-free and take no responsibility for any losses that come as a result of its use. To run 'researcher mode', simply download and run the executable: MultiLog.exe

To run 'deployment mode', download and run MultiLog.exe but ensure there is a configuration file named "config.txt" located in the same directory as MultiLog.exe. Configuration files can be generated automatically by MultiLog while running in 'researcher mode' - see above. They can also be manually written and edited. An example "config.txt" file is provided which will run the Google Chrome, Mozilla Firefox, Mozilla Thunderbird, Microsoft PSR, Drag, Drag-and-Drop, Window Switch, Clipboard and Process loggers. To download this file, click here: config.txt

MultiLog Re-Combination Software

The MultiLog Re-Combination Software merges the contents of SQLite databases given a file path to a directory containing two or more data sources. It enables researchers to combine all the log output for a given user into a single text file. It is written in C# and runs in Microsoft Visual Studio and can be downloaded here: MultiLog-ReCombination.zip

MultiLog Quick Access Study

Please use this version if you have been invited to the MultiLog Quick Access Study: FinalProject.zip

MultiLog Source Code

Please contact the authors for a copy of the source code.