Advanced evidence collection and analysis of web browser activity

Digital Investigation

Volumn 8, Issue SUPPL., 2011, Pages

  Oh, Junghoon ^a   Lee, Seungbong ^b   Lee, Sangjin ^a  

^a Korea University   (South Korea)

^b Korea Financial Security Agency   (South Korea)

Author keywords

Integrated timeline analysis; Restoration of deleted web browser information; Search word analysis; URL decoding; Web browser forensics

Indexed keywords

APPLICATION PROGRAMS; WEB BROWSERS;

EVIDENCE COLLECTION; LOG FILE; SEARCH WORDS; TIMELINE ANALYSIS;

WEB CRAWLER;

EID: 79961092165     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2011.05.008     Document Type: Conference Paper

References (8)

1. Berners-Lee T, Masinter L. RFC 1738:Uniform Resource Locator(URL), http://tools.ietf.org/html/rfc1738.
2. Keith J. Jones Forensic analysis of internet explorer activity files. Foundstone 2003 http://www.foundstone.com/us/pdf/wp-index-dat.pdf
3. Keith j. Jones, and Blani Rohyt Web browser forensic. Security focus 2005 http://www.securityfocus.com/infocus/1827
4. Keith j. Jones, and Blani Rohyt Web browser forensic. Security focus 2005 http://www.securityfocus.com/infocus/1832
5. Net application. Browser market share 2011 https://marketshare.hitslink. com/browser-market-share.aspx?qprid=0
6. Net application. Browser market share 2011 http://marketshare.hitslink. com/search-engine-market-share.aspx?qprid=4
7. Murilo Tito Pereira Forensic analysis of the Firefox3 internet history and recovery of deleted SQLite records Digital Investigation 2009 93 103 5
8. Yergeau F. RFC 3629: UTF-8, a transformation format of ISO 10646, http://tools.ietf.org/html/rfc3629.