Kristinn Guðjónsson

Google Chrome stores the browser history in a SQLite database, not unlike Firefox. Yet the structure of the database file is quite different. Chrome stores its files in the following locations: Linux: /home/$USER/.config/google-chrome/Linux: /home/$USER/.config/chromium/Windows Vista (and Win 7):...

In the last post I talked about the tool log2timeline, and mentioned a hypothetical case that we are working on. Let's explore in further detail how we can use the tool to assist us in our analysis. How do we go about collecting all the data that we need for the case? In this case we know that the...