Foxton Forensics - Blog

Recovering Edge browser history using Windows Timeline

16 Oct 2018

Web pages that are viewed using the Edge browser are visible within Windows Timeline. Our testing has shown that browser activity remains in Timeline even when the Edge browser history has been cleared. Therefore, Timeline could be a useful source of data for browser forensics, as it can potentially provide easy access to deleted browser history.

Read More

Timestamps in internet history

15 Oct 2016

When analysing web browser history the date and time that a particular action occurred can be just as important as the action itself. For example, you may be analysing history on a device that multiple people have access to and the exact time a particular action occurred could make all the difference.

Read More

Examining internet history in forensic images

03 Jul 2016

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. Whichever method is chosen the investigator will need to mount the forensic image in order to present the internet history data to BHE, as it does not directly support the parsing of forensic image files.

Read More