On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

Robert Bagley; R. Ian Ferguson; Petra Leimich

On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

Robert Bagley, R. Ian Ferguson, Petra Leimich

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

138 Downloads (Pure)

Abstract

A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.

Original language	English
Title of host publication	Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012
Editors	Denis Edgar-Nevill
Publisher	Canterbury Christ Church University
ISBN (Electronic)	9781899253944
Publication status	Published - Sept 2012
Event	6th International Conference on Cybercrime Forensics Education & Training, - Canterbury, United Kingdom Duration: 6 Sept 2012 → 6 Sept 2012

Conference

Conference	6th International Conference on Cybercrime Forensics Education & Training,
Abbreviated title	CFET
Country/Territory	United Kingdom
City	Canterbury
Period	6/09/12 → 6/09/12

Keywords

Browser history
Firefox
SQLite
Database forensic analysis

Access to Document

CFET2012_abstractAccepted author manuscript, 90.1 KB

Cite this

@inproceedings{f38e7d4a04274fe8a58ae396cd6213b3,

title = "On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space",

abstract = "A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.",

author = "Robert Bagley and Ferguson, {R. Ian} and Petra Leimich",

year = "2012",

month = sep,

language = "English",

editor = "Denis Edgar-Nevill",

booktitle = "Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012",

publisher = "Canterbury Christ Church University",

note = "6th International Conference on Cybercrime Forensics Education & Training,, CFET ; Conference date: 06-09-2012 Through 06-09-2012",

}

Bagley, R, Ferguson, RI & Leimich, P 2012, On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. in D Edgar-Nevill (ed.), Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. Canterbury Christ Church University, 6th International Conference on Cybercrime Forensics Education & Training, Canterbury, United Kingdom, 6/09/12.

On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. / Bagley, Robert; Ferguson, R. Ian; Leimich, Petra.
Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012. ed. / Denis Edgar-Nevill. Canterbury Christ Church University, 2012.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

AU - Bagley, Robert

AU - Ferguson, R. Ian

AU - Leimich, Petra

PY - 2012/9

Y1 - 2012/9

N2 - A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.

AB - A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.

M3 - Conference contribution

BT - Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012

A2 - Edgar-Nevill, Denis

PB - Canterbury Christ Church University

T2 - 6th International Conference on Cybercrime Forensics Education & Training,

Y2 - 6 September 2012 through 6 September 2012

ER -

On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

Abstract

Conference

Keywords

Access to Document

Fingerprint

Cite this