Recovering deleted internet history from System Restore points

Most of us are familiar with System Restore, the feature within Microsoft Windows that allows you to restore your computer to a previous state. This feature can be a very useful source of data when analysing internet history, as it can...

View details »

Examining internet history in forensic images

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. In a previous blog post we discussed the various methods for capturing internet history from a live...

View details »

Capturing web browser history from a remote computer

There are many instances where an investigator or administrator may want to review the web browser history of a live running system. This could be part of routine checks carried out by a network administrator or it may be an...

View details »