The internet is one main reason why computers and smartphones have become so popular. This module will teach you how to access web history from windows computers and utilize it in a investigation
Objectives
Learn what files and folders are associated with web history
Learn how to read data within the web history files
Learn how to view cached data
Learn what files are associated with chrome history
In order to view data revolving history in chrome, navigate to the path <user>/AppData/Local/Google/Chrome/User Data/Default.
Within this folder is a collection of useful information such as cookies, login data, and history.
Inside the above directory there is a folder called History. This file contains a range of information regarding history in the chrome browser. This file will wipe when history is cleared, and will not be updated when incognito mode is used. Within the file information such as:
URLs
ID
Title
Visit Counts
Last_Vist_Time
Redirects
Visit Duration
Keyword Searches
Downloads
Download path
Cookies and site data
In the chrome default folder another file exists called cookies. This contains all information that websites require to have when visited by the users such as:
Name
Role
Date Joined
Parameters
Shopping Cart
Cookie name.
Cached Files
Files and information that have been cached by google are stored in the Cache file. This can be images or website thumbnails
Firefox and Internet Explorer History
The format of Firefox and Internet Explorer web browser files are similar. The directories include <user>/AppData/Local/Microsoft/Windows, and for Firefox <user>/AppData/Local/Mozilla/FireFox/Profiles/<mozzila-version>
Internet Browser Forensics
Introduction
The internet is one main reason why computers and smartphones have become so popular. This module will teach you how to access web history from windows computers and utilize it in a investigation
Objectives
Learn what files are associated with chrome history
In order to view data revolving history in chrome, navigate to the path
<user>/AppData/Local/Google/Chrome/User Data/Default.Within this folder is a collection of useful information such as cookies, login data, and history.
Inside the above directory there is a folder called
History. This file contains a range of information regarding history in the chrome browser. This file will wipe when history is cleared, and will not be updated when incognito mode is used. Within the file information such as:Cookies and site data
In the chrome default folder another file exists called
cookies. This contains all information that websites require to have when visited by the users such as:Cached Files
Files and information that have been cached by google are stored in the
Cachefile. This can be images or website thumbnailsFirefox and Internet Explorer History
The format of Firefox and Internet Explorer web browser files are similar. The directories include
<user>/AppData/Local/Microsoft/Windows, and for Firefox<user>/AppData/Local/Mozilla/FireFox/Profiles/<mozzila-version>