Knowledgebase:
Investigating Mozilla Firefox History Data
Posted by Jack H. Ward, Last modified by Jack H. Ward on 07 February 2018 07:03 AM

Electronic Evidence Examiner allows you to add a special places.sqlite file that can contain history data created by the Mozilla Firefox browser.

By default, this file can be found in the following locations:

OS

Browser

File location

Windows 10

Windows 7, 8, 8.1

Firefox

 

C:\Users\<user>\AppData\Roaming\Mozilla\Firefox\Profiles\<profile folder>\places.sqlite

To investigate Mozilla Firefox History data, do the following:

1. Have the Add New Evidence window open.
2. In the Category list, select Internet Browser Data. In the Source Type list, select Firefox History Data. Click OK.



3. In the standard Open window, navigate to the desired sqlite file. Click Open.
4. Enter the Evidence name (by default, the name of the file to be added) and click OK.
5. The Mozilla Firefox History data is added to the case.



Attachments 
 
 Mozilla Firefox history data.png (25.85 KB)
(0 vote(s))
Helpful
Not helpful

Comments (0)