search

obsidianforensics / hindsight

Web browser forensics for Google Chrome/Chromium
https://dfir.blog/hindsight/
Apache License 2.0
1.06k stars 140 forks source link

Disk Cache Format changed to V3 #133

Open RandomNameUser opened 1 year ago

RandomNameUser commented 1 year ago

Describe the problem The disk cache format has changed to a new version in the latest Chrome release. The current pyhindsight version cannot read it at all.

There is some documentation about the format at https://www.chromium.org/developers/design-documents/network-stack/disk-cache/disk-cache-v3/, even though that's probably not enough to fix the implementation. :(

obsidianforensics commented 1 year ago

Thanks for raising this - I'll take a look