Yesterday and today I was at the 1stĀ International Conference on Cybercrime, Security and Digital Forensics held at Strathclyde University where I presented a paper I wrote based onĀ my master's thesisĀ on web history visualisations for forensic investigations. You can download theĀ paperĀ and myĀ slidesĀ here, or contact theĀ conference organiserĀ for the whole conference book. The presentation went really well; I'm … Continue reading International Conference on Cybercrime, Security and Digital Forensics
Tag: web history
Internet proxy log analysis preprocessing
Proxy logs need a bit of work done to them before you can start analysing the content. This is of course assuming you don't have a fancy product to do all this work for you ;). First, you need to work out the regular expression that defines a line in the proxy log to parse … Continue reading Internet proxy log analysis preprocessing
How Internet Explorer stores web history
Internet Explorer stores files downloaded from the internet in a cache called Temporary Internet Files (e.g. html pages, images, CSS files). Each cached file is assigned an alphanumeric cache name. Some index.dat files serve to map the cached name with the filename and URL it came from. Other index.dat files store the userās cookies or web browser history (by default 20 … Continue reading How Internet Explorer stores web history
How Opera stores web history
Out of all the popular browsers, Opera leaves behind the least amount of useful information for investigators. Not only is the data stored in plain text format, but it does not record every URL visited, only the latest one. Therefore it is impossible to tell how often someone has visited a particular website. Even when … Continue reading How Opera stores web history
How Safari stores web history
Safari has a very simple method of storing browser history compared to those that use SQLite databases. If the computer is running Windows XP, the Safari default path to user data is: C:\Documents and Settings\<User Name>\Application Data\Apple Computer\Safari For Windows Vista and Windows 7, the default path is: C:\Users\<User Name>\AppData\Roaming\Apple Computer\Safari\ For Apple Macintosh computers, … Continue reading How Safari stores web history
How Google Chrome stores web history
In 2008 Google released most of Chromeās source code as a project called Chromium under a BSD license. Chromium is essentially the same browser as Chrome, but lacks built-in automatic updates and Google branding [Chromium Developer Website]. Assuming the computer is running Windows XP, the Chrome default path to user data is: C:\Documents and Settings\<User … Continue reading How Google Chrome stores web history
How Firefox stores web history
Firefox version 3 (first released in 2008) employs a different system of storing browser history than its predecessor Firefox 2. Since onlyĀ 2.75% of Firefox usersĀ still use version 2 or smaller, only Firefox version 3 will be explored here and will hence just been known as Firefox. Firefox uses SQLite database files to store browser history, … Continue reading How Firefox stores web history
