Copy Web Browser Files
A simple script used to identify all browser history cookie and cache files in a case and copy them out for further processing using 3rd party tools. Currently it only copies current live user data and does not attempt to recover deleted history/cache files. The script supports Internet Explorer Firefox Chrome/Chromium Opera and Safari on Windows *nix and Mac platforms. The script will search for browser files and folders and copy them out to a user specified folder using the structure: Device Volume User Browser This allows the use of 3rd party tools (e.g. Netanalysis or Cacheback etc.) to analyse the web browser history and cache. For example it allows the use of the Netanalysis 'Open All History From Folder...' function at the volume user or browser level depending on the records and/or functionality required.
Download NowEnCase Forensic 7.05