Internet analysis
Name |
From |
Description |
---|---|---|
Chrome Session Parser | CCL Forensics | Python module for performing off-line parsing of Chrome session files (“Current Session”, “Last Session”, “Current Tabs”, “Last Tabs”) |
ChromeCacheView | Nirsoft | Reads the cache folder of Google Chrome Web browser, and displays the list of all files currently stored in the cache |
Cookie Cutter | Mike’s Forensic Tools | Extracts embedded data held within Google Analytics cookies. Shows search terms used as well as dates of and the number of visits. |
Dumpzilla | Busindre | Runs in Python 3.x, extracting forensic information from Firefox, Iceweasel and Seamonkey browsers. See manual for more information. |
Facebook Profile Saver | Belkasoft | Captures information publicly available in Facebook profiles. |
IECookiesView | Nirsoft | Extracts various details of Internet Explorer cookies |
IEPassView | Nirsoft | Extract stored passwords from Internet Explorer versions 4 to 8 |
MozillaCacheView | Nirsoft | Reads the cache folder of Firefox/Mozilla/Netscape Web browsers |
MozillaCookieView | Nirsoft | Parses the cookie folder of Firefox/Mozilla/Netscape Web browsers |
MozillaHistoryView | Nirsoft | Reads the history.dat of Firefox/Mozilla/Netscape Web browsers, and displays the list of all visited Web page |
MyLastSearch | Nirsoft | Extracts search queries made with popular search engines (Google, Yahoo and MSN) and social networking sites (Twitter, Facebook, MySpace) |
PasswordFox | Nirsoft | Extracts the user names and passwords stored by Mozilla Firefox Web browser |
OperaCacheView | Nirsoft | Reads the cache folder of Opera Web browser, and displays the list of all files currently stored in the cache |
OperaPassView | Nirsoft | Decrypts the content of the Opera Web browser password file, wand.dat |
Web Historian | Mandiant | Reviews list of URLs stored in the history files of the most commonly used browsers |
Web Page Saver* | Magnet Forensics | Takes list of URLs saving scrolling captures of each page. Produces HTML report file containing the saved pages |