Forensic acquisition is the process of making a forensic copy of data from a computer's hard drive or other storage media.

Tool: BrowsingHistoryView

Download 64-bit (x64) utilities package for Windows

Tool: BrowsingHistoryView

Browsers store user information like history, URLs visited, cache, cookies, and etc. in sqlite databases and json format. We can parse these to view the data relevant to us. 

Untitled

Similarly Google Chrome has its own location where the user data is stored.

Here are storage paths for some other common web browsers:

**Firefox:** “%USERPROFILE%\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\”

**Edge:** “%USERPROFILE%\\AppData\\Local\\Microsoft\\Edge\\User Data\\”

**Opera:** “%USERPROFILE%\\AppData\\Roaming\\Opera Software\\Opera Stable”

Some common browser artifacts are: