Capturing web pages as evidence

26 Jun 2023

We recently released PageRecon, a new tool for capturing and preserving web pages as forensically-defensible evidence. PageRecon is a Windows app that features an embedded version of the Chromium web browser. The user simply navigates to the desired web page and clicks the 'Capture' button.

Read More

Examining internet history in forensic images

02 Jun 2021

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. Whichever method is chosen the investigator will need to mount the forensic image in order to present the internet history data to BHE, as it does not directly support the parsing of forensic image files.

Read More

Recovering deleted internet history from Volume Shadow Copies

02 Jun 2021

Depending on when Volume Shadow Copies are created and how long they are retained for we may be able to recover deleted internet history from them. In order to take advantage of this additional data source we have updated Browser History Examiner to capture internet history from Volume Shadow Copies.

Read More

Investigating web history in the new Edge Chromium browser

27 Jan 2020

Edge has joined a long list of web browsers based on the open-source Chromium browser, most notably Chrome. This means Edge now stores browsing history in an almost identical format to Chrome. Browser History Examiner and our free tools have been updated to support the new Chromium-based Edge browser.

Read More

Recovering Edge browser history using Windows Timeline

16 Oct 2018

Web pages that are viewed using the Edge browser are visible within Windows Timeline. Our testing has shown that browser activity remains in Timeline even when the Edge browser history has been cleared. Therefore, Timeline could be a useful source of data for browser forensics, as it can potentially provide easy access to deleted browser history.

Read More

Recent Posts

Categories