Capturing web pages as evidence

26 Jun 2023

We recently released PageRecon, a new tool for capturing and preserving web pages as forensically-defensible evidence. PageRecon is a Windows app that features an embedded version of the Chromium web browser. The user simply navigates to the desired web page and clicks the 'Capture' button.

Read More

Analysing Safari browser history

09 Mar 2023

We recently added support for analysing Safari history from macOS. We have also extended support for analysing macOS browser history by adding support for the 'Simple Cache' format used by Chromium browsers such as Chrome and Edge on macOS.

Read More

Analysing browser site settings

12 Sep 2022

In Chromium browsers such as Chrome and Edge there are various settings that allow you to control the browser's behaviour on a per-website basis. To more easily access this data we’ve updated BHE to include a new Site Settings artifact which automatically parses this data from the Preferences file.

Read More

Examining internet history in forensic images

02 Jun 2021

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. Whichever method is chosen the investigator will need to mount the forensic image in order to present the internet history data to BHE, as it does not directly support the parsing of forensic image files.

Read More

Recovering deleted internet history from Volume Shadow Copies

02 Jun 2021

Depending on when Volume Shadow Copies are created and how long they are retained for we may be able to recover deleted internet history from them. In order to take advantage of this additional data source we have updated Browser History Examiner to capture internet history from Volume Shadow Copies.

Read More

Recent Posts

Categories