On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

Robert Bagley, R. Ian Ferguson, Petra Leimich

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.
Original languageEnglish
Title of host publicationProceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012
EditorsDenis Edgar-Nevill
PublisherCanterbury Christ Church University
ISBN (Electronic)9781899253944
StatePublished - Sep 2012
Event6th International Conference on Cybercrime Forensics Education & Training, - Canterbury, United Kingdom

Conference

Conference6th International Conference on Cybercrime Forensics Education & Training,
Abbreviated titleCFET
CountryUnited Kingdom
CityCanterbury
Period6/09/126/09/12

Fingerprint

Web browsers
Recovery
Application programs
Engines
Android (operating system)

Cite this

Bagley, R., Ferguson, R. I., & Leimich, P. (2012). On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. In D. Edgar-Nevill (Ed.), Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012 Canterbury Christ Church University.

Bagley, Robert; Ferguson, R. Ian; Leimich, Petra / On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space.

Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. ed. / Denis Edgar-Nevill. Canterbury Christ Church University, 2012.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

@inbook{f38e7d4a04274fe8a58ae396cd6213b3,
title = "On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space",
abstract = "A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.",
author = "Robert Bagley and Ferguson, {R. Ian} and Petra Leimich",
year = "2012",
month = "9",
editor = "Denis Edgar-Nevill",
booktitle = "Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012",
publisher = "Canterbury Christ Church University",

}

Bagley, R, Ferguson, RI & Leimich, P 2012, On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. in D Edgar-Nevill (ed.), Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. Canterbury Christ Church University, 6th International Conference on Cybercrime Forensics Education & Training, Canterbury, United Kingdom, 6-6 September.

On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. / Bagley, Robert; Ferguson, R. Ian; Leimich, Petra.

Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. ed. / Denis Edgar-Nevill. Canterbury Christ Church University, 2012.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

TY - CHAP

T1 - On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

AU - Bagley,Robert

AU - Ferguson,R. Ian

AU - Leimich,Petra

PY - 2012/9

Y1 - 2012/9

N2 - A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.

AB - A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.

M3 - Conference contribution

BT - Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012

PB - Canterbury Christ Church University

ER -

Bagley R, Ferguson RI, Leimich P. On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. In Edgar-Nevill D, editor, Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. Canterbury Christ Church University. 2012.