Recovering Edge browser history using Windows Timeline

16 Oct 2018

Web pages that are viewed using the Edge browser are visible within Windows Timeline. Our testing has shown that browser activity remains in Timeline even when the Edge browser history has been cleared. Therefore, Timeline could be a useful source of data for browser forensics, as it can potentially provide easy access to deleted browser history.

Read More

Recovering deleted internet history from System Restore points

13 Jan 2018

Depending on when System Restore points are created and how long they are retained for, they can provide us with historical data that wouldn't otherwise be available. In order to take advantage of this additional data source we have updated our software to capture internet history from System Restore points.

Read More

Examining internet history in forensic images

03 Jul 2016

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. Whichever method is chosen the investigator will need to mount the forensic image in order to present the internet history data to BHE, as it does not directly support the parsing of forensic image files.

Read More

Capturing web browser history from a remote computer

27 Apr 2016

To streamline the process of capturing browser history from a Windows computer on a network we have added a remote capture feature within BHE. This allows you to capture browser history from a remote computer on your network and copy the output directly to your own computer without needing physical access or using Remote Desktop.

Read More

Recent Posts

Categories