was doing an undelete/recovery on some files, and tripped across this on accident.
http://www.woanware.co.uk/forensics/fir ... actor.html
http://sessionmanager.mozdev.org/histor ... on=0.8.1.3
and even scrambled SQLdatabases can be recovered
http://www.cgsecurity.org/wiki/PhotoRec
more scary stuff here
https://forensiccontrol.com/resources/f ... et-history
edit,
and this looks like a good registry exporter for windows folks. might also be good for finding and removing un-used network protocols, and looking for BadBios headers http://www.securityartwork.es/2013/10/3 ... 2/?lang=en
http://www.mitec.cz/wrr.html
session restore JSON bread trail
session restore JSON bread trail
Mozilla/5.0 (Windows NT 6.0; rv:28.0) Gecko/20100101 Firefox/28.0
Re: session restore JSON bread trail
( your links broke,
need to, generally, enclose them [url] tags,
actually, on this board, any time you edit
a URL & it is past a certain length, it breaks,
don't ask me why? so if you were to edit
your post, you'll end up breaking your
unbroken links )
http://www.woanware.co.uk/forensics/fir ... actor.html
So it parses .json files.
And like, the point? Just a text file anyway. You can parse it in any number of ways.
need to, generally, enclose them [url] tags,
actually, on this board, any time you edit
a URL & it is past a certain length, it breaks,
don't ask me why? so if you were to edit
your post, you'll end up breaking your
unbroken links )
http://www.woanware.co.uk/forensics/fir ... actor.html
So it parses .json files.
And like, the point? Just a text file anyway. You can parse it in any number of ways.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26.1
Re: session restore JSON bread trail
It is just another complete web trail that it would be nice to clear on exit.
I'm paranoid about the sql databases with every download and website visit too...
I'm paranoid about the sql databases with every download and website visit too...
Mozilla/5.0 (Windows NT 6.0; rv:28.0) Gecko/20100101 Firefox/28.0
Re: session restore JSON bread trail
http://kb.mozillazine.org/Session_Resto ... sion_store
Commandline JSON Pretty. Other methods mentioned in the comments.
Commandline JSON Pretty. Other methods mentioned in the comments.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26.1