Recovering Edge browser history using Windows Timeline

Windows 10 now includes a feature called Timeline that allows you to easily view recent activity carried out, such as documents and web pages that have been opened. Currently only web pages that are viewed using the Edge browser are...

View details »

Recovering deleted internet history from System Restore points

Most of us are familiar with System Restore, the feature within Microsoft Windows that allows you to restore your computer to a previous state. This feature can be a very useful source of data when analysing internet history, as it can...

View details »

Examining internet history in forensic images

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. In a previous blog post we discussed the various methods for capturing internet history from a live...

View details »

Capturing web browser history from a remote computer

There are many instances where an investigator or administrator may want to review the web browser history of a live running system. This could be part of routine checks carried out by a network administrator or it may be an...

View details »