Robert Bagley
On the digital forensic analysis of the Firefox browser via recovery of SQLite artefacts from unallocated space
Bagley, Robert; Ferguson, R Ian; Leimich, Petra
Abstract
A technique and supporting tool for the recovery of browsing activity (both currently stored and deleted) from the Firefox web-browser is presented. The approach is based upon applying file-carving techniques (matching regular expressions against raw disk images) to the problem of recovering recognizable fragments of internal database structures. The generality of the technique is discussed: It is potentially applicable not only to Firefox but also to any software that uses the popular SQLite embedded database engine such as the Apple Safari web-browser and many Android apps.
Conference programme -https://www.canterbury.ac.uk/social-and-applied-sciences/law-criminal-justice-and-computing/docs/cfet/cfet-2012.pdf
Citation
Bagley, R., Ferguson, R. I., & Leimich, P. (2012, September). On the digital forensic analysis of the Firefox browser via recovery of SQLite artefacts from unallocated space. Paper presented at CFET (Cyberforensics in Education and Training )
Presentation Conference Type | Conference Paper (unpublished) |
---|---|
Conference Name | CFET (Cyberforensics in Education and Training ) |
Start Date | Sep 6, 2012 |
End Date | Sep 7, 2012 |
Deposit Date | Jun 1, 2017 |
Publicly Available Date | Jun 1, 2017 |
Keywords | Digital forensics, browser forensics, |
Public URL | http://researchrepository.napier.ac.uk/Output/408478 |
Related Public URLs | https://www.canterbury.ac.uk/social-and-applied-sciences/law-criminal-justice-and-computing/docs/cfet/cfet-2012.pdf |
Contract Date | Jun 1, 2017 |
Files
On the digital forensic analysis of the Firefox browser via recovery of the SQLite artefacts from unallocated space
(229 Kb)
PDF
You might also like
From crime to court - an experience report of a digital forensics group project module.
(2014)
Presentation / Conference Contribution
A Comparison of Geo-tagging in Mobile Internet Browsing Applications on iOS and Android.
(2014)
Presentation / Conference Contribution
An assessment of data leakage in Firefox under different conditions.
(2014)
Presentation / Conference Contribution
Fast Filtering of Known PNG Files Using Early File Features
(2017)
Presentation / Conference Contribution
Fingerprinting JPEGs With Optimised Huffman Tables
(2018)
Journal Article
Downloadable Citations
About Edinburgh Napier Research Repository
Administrator e-mail: repository@napier.ac.uk
This application uses the following open-source libraries:
SheetJS Community Edition
Apache License Version 2.0 (http://www.apache.org/licenses/)
PDF.js
Apache License Version 2.0 (http://www.apache.org/licenses/)
Font Awesome
SIL OFL 1.1 (http://scripts.sil.org/OFL)
MIT License (http://opensource.org/licenses/mit-license.html)
CC BY 3.0 ( http://creativecommons.org/licenses/by/3.0/)
Powered by Worktribe © 2024
Advanced Search