On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space

Robert Bagley, R. Ian Ferguson, Petra Leimich

    Research output: Chapter in Book/Report/Conference proceedingConference contribution

    111 Downloads (Pure)

    Abstract

    A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.
    Original languageEnglish
    Title of host publicationProceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012
    EditorsDenis Edgar-Nevill
    PublisherCanterbury Christ Church University
    ISBN (Electronic)9781899253944
    Publication statusPublished - Sep 2012
    Event6th International Conference on Cybercrime Forensics Education & Training, - Canterbury, United Kingdom
    Duration: 6 Sep 20126 Sep 2012

    Conference

    Conference6th International Conference on Cybercrime Forensics Education & Training,
    Abbreviated titleCFET
    Country/TerritoryUnited Kingdom
    CityCanterbury
    Period6/09/126/09/12

    Keywords

    • Browser history
    • Firefox
    • SQLite
    • Database forensic analysis

    Fingerprint

    Dive into the research topics of 'On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space'. Together they form a unique fingerprint.

    Cite this