April Newsletter


The importance of testing forensic software
The following blog post provides a great example of the importance of regularly testing the forensic software you use and applying the principle of dual-tool verification:
https://www.dfir.co.za/2019/03/09/encase-you-were-hoping-to-parse-firefox/

Microsoft Edge artefacts are changing
Microsoft has released the first official preview build of the Edge browser that is based on Chromium. Our initial research shows that the history and cache artefacts are the same as the Chrome browser. We'll be carrying out further research in this area soon. You can download the preview build from Microsoft:
https://www.microsoftedgeinsider.com/en-us/download

Browser History Examiner v1.9.1 released
BHE v1.9.1 has been released, adding support for Chrome v73. The format of the "Top Sites" SQLite database file changed in this version of Chrome. Customers with a support subscription can download this update from our customer portal:
https://www.foxtonforensics.com/downloads/products/