Examining internet history in forensic images

03 Jul 2016

There are a number of ways we can capture and present internet history data to Browser History Examiner (BHE) for analysis. Whichever method is chosen the investigator will need to mount the forensic image in order to present the internet history data to BHE, as it does not directly support the parsing of forensic image files.

Read More

Capturing web browser history from a remote computer

27 Apr 2016

To streamline the process of capturing browser history from a Windows computer on a network we have added a remote capture feature within BHE. This allows you to capture browser history from a remote computer on your network and copy the output directly to your own computer without needing physical access or using Remote Desktop.

Read More

Browser History Examiner v1.5 released

10 Feb 2016

Browser History Examiner v1.5 is now available to download. New features include: Extracting Email Addresses, Linking Form History to Web Page URLs and Searching Cached JSON Content.

Read More

Linking form history to web page URLs

09 Feb 2016

Both Chrome and Firefox store values entered into HTML forms in order to provide an autocomplete option the next time the web page is visited. However, neither browser stores the associated URL as part of a form entry record. However, we can calculate with a certain level of accuracy which domain a form value was first or last entered against.

Read More

Web page reconstruction for forensic analysis

20 Jan 2016

Web page reconstruction is a vital feature of any forensic software used for analysing browser history. Web page reconstruction is the process of using HTML and other resources stored in the web browser cache to rebuild a web page, allowing it to be easily viewed in the state it was originally seen by the user. This can be a great piece of visual evidence to include in a report, as we all know "a picture is worth a thousand words".

Read More

Recent Posts

Categories