Web browser forensics: Mozilla Firefox
by Hitesh Sanghvi; Digvijaysinh Rathod; Parag Shukla; Ramya Shah; Yashrajsinh Zala
International Journal of Electronic Security and Digital Forensics (IJESDF), Vol. 16, No. 4, 2024

Abstract: Aside from Internet Explorer, Mozilla's Firefox is one of the most established and popular web browsers. These days, Firefox allows private (Incognito) windows just like every other browser. According to Mozilla Firefox, private browsing does not save cookies or browsing history and leaves no traces behind when sessions are ended. If offenders commit crimes while using private browsing, this will present a barrier to digital forensic analysis because there would not be any computer-based evidence. While Mozilla Firefox was open in both normal and private modes, we conducted an in-depth investigation to assess the status of the evidence. In the experiment, the activities were carried out in one virtual machine in regular mode and another in a private Firefox window. Later, we carried out forensic acquisition of the RAM and hard drive and evaluated what kinds of evidence were discovered from both VMs. The tools FTK and Autopsy were used to analyse the collected data. We found the important evidence of various activities obtained related to Google, YouTube, Twitter, Amazon, Facebook, Outlook, Yahoo and Gmail using FTK and Autopsy through the hard disk and RAM forensics while Firefox opened in normal and private mode. We can also determine from this result that FTK carves more data from the image file than autopsy.

Online publication date: Fri, 05-Jul-2024

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Electronic Security and Digital Forensics (IJESDF):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com