A technique and supporting tool for the recovery of browsing activity (both stored and deleted) from current and recent versions of the Firefox web-browser is presented. The generality of the technique is discussed: It is applicable to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.
|Title of host publication||Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012|
|Publisher||Canterbury Christ Church University|
|Publication status||Published - Sep 2012|
|Event||6th International Conference on Cybercrime Forensics Education & Training, - Canterbury, United Kingdom|
Duration: 6 Sep 2012 → 6 Sep 2012
|Conference||6th International Conference on Cybercrime Forensics Education & Training,|
|Period||6/09/12 → 6/09/12|
Bagley, R., Ferguson, R. I., & Leimich, P. (2012). On the digital forensic analysis of the Firefox browser via recovery of SQLite artifacts from unallocated space. In D. Edgar-Nevill (Ed.), Proceedings of the 6th International Conference on Cybercrime Forensics Education and Training CFET 2012 Canterbury Christ Church University.