Linking form history to web page URLs

09 Feb 2016

Both Chrome and Firefox store values entered into HTML forms in order to provide an autocomplete option the next time the web page is visited. However, neither browser stores the associated URL as part of a form entry record. However, we can calculate with a certain level of accuracy which domain a form value was first or last entered against.

Read More

Web page reconstruction for forensic analysis

20 Jan 2016

Web page reconstruction is a vital feature of any forensic software used for analysing browser history. Web page reconstruction is the process of using HTML and other resources stored in the web browser cache to rebuild a web page, allowing it to be easily viewed in the state it was originally seen by the user. This can be a great piece of visual evidence to include in a report, as we all know "a picture is worth a thousand words".

Read More

Building a history of search terms

14 Jan 2016

The keywords a user chooses in order to search the Internet are one of the most valuable pieces of information that can be retrieved from browser history. The chosen keywords often give an insight into the exact content the user was searching for and provide some context to the remainder of the Internet records stored.

Read More

Analysing Skype contacts in the browser cache

14 Jan 2016

In the past it has been possible to recover artefacts for various online services such as Facebook and Gmail from the browser cache on disk. This was most likely due to different browser behaviour, incorrect use of HTTP headers in responses and a lack of consideration over data privacy.

Read More

Recent Posts

Categories