Introduction

The Entry Type column is the first column in the grid and contains a value that is generated by NetAnalysis® on import. It identifies the type of entry the record relates to. The following table briefly outlines each entry type.


Entry TypeInformation

AddressMozilla Firefox allows autofill addresses to be saved so that forms can be quickly completed from a drop-down list of saved addresses.

AppCache

These entries relate to application cache.

HTML5 introduces application cache, which means that a web application is cached, and accessible without an internet connection. Application cache gives an application three advantages:

  1. Offline browsing - users can use the application when they are offline
  2. Speed - cached resources load faster
  3. Reduced server load - the browser will only download updated/changed resources from the server

AppCacheEntry
ArchivedThis is a Chromium based browser artefact which relates to archived history entries stored in the Archived History database (Chrome v1 - 36).

Audio Queue

This is an Epic Privacy Browser on Android artefact which relates to the Audio Queue feature where Epic will read aloud queued web pages. Epic can read a set of webpages, to the user, using Android's text-to-speech functionality. For any webpage the user wants to read, they click on the menu and select "Add to Audio Queue". When they are ready to listen to the pages, they select Audio Queue from the menu.

Audit CookieThis is a Chromium based browser artefact which relates to access context auditing of client-side cookies.

Audit StorageThis is a Chromium based browser artefact which relates to access context auditing of client-side storage.

Autocomplete PredictorThis is a Chromium based browser artefact which relates to autocomplete network action predictor entries stored in the Network Action Predictor database.

AutofillThis is a Chromium based browser artefact which relates to the auto-completion data for a form entry.

Autofill Correction

This is a Safari browser artefact which relates to user corrections of their autofill data.

Autofill Profile

Chromium based browsers allow autofill profiles to be saved so that forms can be quickly completed from a drop-down list of saved profiles.

BackgroundTransferApi

This is a Microsoft Internet Explorer/Edge browser artefact. The Background Transfer API enables advanced download and upload transfer capabilities within an app. See the following for further information:

BingPageDataThis is a Microsoft Internet Explorer/Edge browser artefact.

Blocked ResourceThis entry relates to a blocked tracker on the Brave browser. These can be either items blocked by Brave Shields or the Brave VPN feature.
BookmarkThis entry relates to a bookmarked web page or website.
Bookmark FolderThis entry relates to a folder for storing bookmarks.  Most browsers allow the user to store their bookmarked pages in a folder hierarchy.

Bookmark LabelThis is a Sleipnir on macOS browser artefact. The entry relates to a user defined bookmark label.

Bookmark Label GroupThis is a Sleipnir on macOS browser artefact. The entry relates to a user defined bookmark label group.

Bookmark SeparatorThis entry relates to a bookmark separator item. Some browsers allow the user to manage bookmarks by adding separators to help distinguish different bookmark categories from each other.

Bookmark TagMany Mozilla based browsers allows the user to categorize their bookmarks by adding tags to help identify them.

Bounce Tracking
CacheThis entry relates to an item which has been cached. A cache is a repository for storing data that is used to expedite the process of retrieving that data. Caches are used to speed up the browsing process so that data does not have to be fetched from its original location every time a page or cached object is requested.

ClientThis is a Mozilla Firefox on Android artefact which relates to a client device that has been connected to a user's Firefox Account.

Collection

This entry relates to the Microsoft Edge browser Collections feature which allows the user to save and group information found on the Internet.

Collection ItemThis entry relates to the Microsoft Edge browser Collections feature. The user can organise individual items into collections.

Compromised Credentials

Google Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach.

ContainerThis entry relates to the Mozilla Firefox browser Containers feature which allows the user to segregate their browsing activity into distinct contexts to preserve privacy.
Cookie

This entry relates to a cookie. A cookie is the term given to describe a type of message that is sent from a website to a browser when browsing a web page. If the server requests that the message persists, it is stored by the browser. When the user re-visits the page, the browser sends the message back to the web server to indicate a previous visit.

Credit CardVarious browsers allow autofill credit card information to be saved so that forms can be quickly completed from a drop-down list of saved credit cards.
Cross-Domain

This is a 360 Browser cross-domain cookie artefact.

DailyThis is a Microsoft Internet Explorer/Edge browser artefact relating to a daily visit entry.

Dependency EntryThese entries relate to pre-resolve and pre-connect data in Microsoft Edge and Internet Explorer. As the browser processes the HTML of a top-level page, it must perform a number of operations to be able to download the additional resources (dependencies) required to display the page.

DeviceThis is a Safari artefact which relates to sharing open tabs across the user's devices via iCloud.

DOM StoreWeb storage and DOM storage (Document Object Model storage) are web application software methods and protocols used for storing data in a web browser. Web storage supports persistent data storage, similar to cookies but with a greatly enhanced capacity and no information stored in the HTTP request header.
DownloadThis entry relates to artefacts which have been downloaded via the web browser.

Drop

This entry relates to the Microsoft Edge browser Drop feature. The user can send files and notes from Edge and the content is then synced across their devices. It allows Edge users to transfer files and notes between all Edge instances on all devices that Edge is used on. To use the feature, the user needs to sign in to a Microsoft Account and click on the Paper Airplane icon on the toolbar.

FaviconA favicon, also known as a shortcut icon, website icon, tab icon or bookmark icon, is a file containing one or more small icons associated with a particular website or web page.

Favorite

A favorite entry is a browser artefact which allows the user to save bookmarks to favourite web pages for later retrieval.

Favorite FolderA favorite folder entry for the Microsoft Edge browser relates to a folder for storing bookmarks. The user can organise their Favorites into folders.
FeedplatThis is an Microsoft Internet Explorer/Edge browser artefact relating to RSS feeds.
Form History

Most browsers can save information every time the user completes a form so that the next time they access a form, they will see a drop-down list of options to choose from.

GalleryThis is an Opera Neon browser artefact. The entry relates to the screenshots and web page shortcuts saved by the user into the web browser's gallery.
HistoryThis entry relates to a standard history visit.
History ProviderThis is a Chromium based browser artefact which relates to autocomplete candidates which have been sourced from the user's history stored in their History Provider Cache.

History TombstoneThis is a Safari browser artefact which relates to deleted history visits.

Host

This is a Mozilla based browser artefact which relates to host entries taken from either the user's history or bookmarks.

(info) This is not related to the Host scheme found in Microsoft Internet Explorer/Edge daily history entries.

Hsts EntryThese are HTTP Strict Transport Security (HSTS) entries. HSTS prevent protocol downgrade attacks and cookie hijacking by forcing web browsers to interact with websites only via secure HTTPS connections (and never HTTP).
IECompatCacheThis is a Microsoft Internet Explorer/Edge browser artefact which relates to the browser Compatibility View list. This is a list of sites that will be displayed in Compatibility View. Sites which appear in the Compatibility View list are sites for which other users have clicked the Compatibility View button. This list is updated automatically by Microsoft and is not necessarily related to any visits made by the user.
IECompatUA
IEFlipaheadThis is a Microsoft Internet Explorer/Edge browser artefact. Flip ahead allows the user to explore favorite websites like they would a magazine. By implementing flip ahead, the web developer enables their users to flip through a news article or an online catalogue, regardless of their actual location on the page. Visitors no longer need to click a Next button to go to the next page.
IETldCacheThis is a Microsoft Internet Explorer/Edge browser artefact. This data is not related to user activity and is generated by Microsoft.
Index

This is a Chromium based browser artefact which relates to entries containing text based content from web pages stored in the History Index database (Chrome v1 - 29).

It can also be a Safari browser artefact containing text based content from web pages that the browser uses for indexing and searching.

Input History

This is a Mozilla based browser artefact which relates to URLs typed by the user.

Insecure CredentialsGoogle Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach.

LeakThis is a Microsoft Internet Explorer/Edge browser artefact. Leak entries relate to cache or cookie entries that have been scheduled for deletion and have not yet been removed by the cache scavenger.

Leaked CredentialsGoogle Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach.

Logged In Predictor

This is a Chromium based browser artefact which relates to logged in predictor entries stored in the Network Action Predictor database.

LoginsThis is a Mozilla based browser artefact which relates to website login username and password entries stored in the logins.json file (Firefox v32.0+).
Login DataThis is a Chromium based browser artefact which relates to website login username and password entries.

Login Exception

This is a Mozilla Firefox on Android artefact which relates to login information. When selected, the browser will not save the username or password and will not prompt the user for this information.

Login StatsThis is a Chromium based browser artefact which relates to the statistics of user interactions with a website.

Logins Disabled

This is a Mozilla based browser artefact which relates to host entries stored in the logins.json file for which the user has declined to store login information (Firefox v32.0+).

MasterThis is a Microsoft Internet Explorer/Edge browser artefact. Master entries relate to master history entries.

Media HistoryThis is a Samsung Internet browser artefact which relates to media content history played in the browser.

Most Visited

This is a Mi Browser and Mint Browser artefact which relates to the most visited searches made by a user.

Navigation HistoryThis is a Microsoft Edge browser artefact and relates to tab history and navigation through the tab. The entry may also have additional metadata about a related product item.
Note

This is an Opera browser artefact which relates to user created notes (Opera v7 - 12).

Note Attachment

 

Note FolderThis is an Opera browser artefact which relates to a folder for storing notes.  This allows the user to store their notes in a folder hierarchy (Opera v7 - 12).
Note SeparatorThis is an Opera browser artefact which relates to a note separator item. This allows the user to manage notes by adding separators to help distinguish different categories of notes from each other (Opera v7 - 12).

Notification

This is a Chromium based browser artefact which relates to website notifications. Website notifications are pop-up messages or alerts displayed by websites to notify users about new content or events even when the website is not actively being viewed. These notifications can be triggered by various events, such as new messages, updates, or notifications from social media, news websites, or other web services.

When a user receives a notification, it typically appears as a pop-up message or alert in the corner of the screen or in the system tray. The notification may contain a title, message, and sometimes an image or icon related to the content or event being notified. Users can interact with notifications by clicking on them, which may open the corresponding website or perform an action, such as marking a message as read or dismissing the notification.

Offline PageThis is an artefact which is found on Android platforms. This allows a user to save web pages to read later, even if the user is offline.

OriginThis is a Mozilla based browser artefact which relates to host entries from the user's history.
Page IconThis is an Opera Neon browser artefact. The entry relates to the icons associated with a particular website or web page.

Page MetadataThis is a Mozilla based browser artefact, which can be found on iOS platforms. It relates to web page metadata.

Password MonitorThis is an Microsoft Edge browser artefact which relates to compromised passwords identified by the Password Monitor feature.
Permission

This artefact relates to permission settings for a website which have been overridden by the user.

Playback

This is a Chromium based browser artefact which relates to media playback history.

Playback Session

This is a Chromium based browser artefact which relates to media playback sessions.

PlaylistThis is a Brave on iOS artefact which relates to media content from a user created playlist.

Playlist FolderThis is a Brave on iOS artefact which relates to media content from a user created playlist.

Popup Tracking

Preferences

This artefact relates to the preferences used by the browser. The associated name/value pairs can be found in the Properties window.

PrivacIEThis is a Microsoft Internet Explorer/Edge browser artefact and relates to InPrivate Filtering. InPrivate Filtering helps prevent the websites a user visits from automatically sending details about the visit to other content providers.

ProfileThis is a Safari browser artefact introduced in Safari v17.  A user can use profiles to keep their browsing separate for topics such as work or personal.  Each profile has separate artefacts such as history, cookies, website data, tab groups and favourites.

ProtectionThis is a Mozilla based browser artefact which relates to the recording of per day content blocking events.

Quick AccessThis is a Samsung Internet browser artefact which relates to website shortcuts on the browser homepage.

Quota UsageThis is a Chromium based browser artefact which relates to the management of storage limits and eviction of client-side web data storage.

Reading ListThis relates to a Reading List entry. During a browsing session, if the user identifies a page to be viewed at a later date, they can add it to a Reading List.

Reading List (View)This entry relates to web pages which has been added to the Reading List whilst in Reading View mode. Reading View mode allows the user to view a page in a clutter-free, reader-friendly view.

Recent HistoryThis is a UC Browser on Android artefact which relates to recent history.

Recovery StoreThis entry relates to Microsoft Internet Explorer and Edge. The Recovery Store file contain information relating to browsing sessions. It was designed to allow the browser to recover from a crash and re-open tabs. Each Recovery Store file contains information relating to various tab sessions. The tab session files contain information relating to the various tabs that have been visited along with their order. See the Tab Entry Type.

RedirectThis entry relates to server-side redirects.
RegistryThis entry relates to browser artefacts read from the Windows Registry.

Remote DeviceThis is a Mozilla Firefox artefact which can be found on mobile platforms. It relates to remote device syncing.

Resource Prefetch Predictor

This is a Chromium based browser artefact which relates to resource prefetch predictor entries stored in the Network Action Predictor database.

RewardThis is a Brave browser artefact which relates to Brave Rewards.
Saved PageWhen closing the application, some browsers prompt the user and ask if they wish to save the open page(s) (such as 360 Security browser). This entry relates to pages that have been saved by the user so that they can be visited at a later date.
Search Engine

This is a Chromium based browser artefact which relates to search engine keyword entries stored in the Web Data database.

Search TermThis entry relates to a search term history entry.

Segment UsageThis is a Chromium based browser artefact. It stores URL segment information which is used for the most visited page view in the web browser.

Server AddressThis is a Chromium based browser artefact which relates to Google Wallet autofill address entries stored in the Web Data database.
Server Credit CardThis is a Chromium based browser artefact which relates to Google Wallet autofill credit card entries stored in the Web Data database.
Session

This is used by different browsers and relates to a user's browsing session.  Depending on the browser, a session can have windows, tabs and cookies which will be recorded as separate Window, Tab, Tab History and Cookie entries.

Session TaskThis is a Min Browser artefact which relates to a saved Task.  Each Task will have tabs and tab history which will be recorded as Tab entries and Tab History entries.
Shortcut

This is an artefact which relates to Omnibox shortcut entries.

Sign On

This is a Mozilla based browser artefact which relates to website login username and password entries stored in the sigons.sqlite database (Firefox v3 - 31).

Sign On DisabledThis is a Mozilla based browser artefact which relates to host entries stored in the sigons.sqlite database for which the user has declined to store login information (Firefox v3 - 31).

Signed In User 

Site PreferencesThis is a Safari browser artefact which relates to the site preferences of a web page.

SnapshotThis is an Android Browser artefact which relates to webpage snapshots.

Speed DialThis is an Opera browser artefact which relates to website shortcuts on the browser homepage.

StarredThis is an Opera browser artefact which relates to favourite website shortcuts on the browser homepage.
Stash

This relates to an Opera browser artefact which allows the user to store web pages to be viewed at a later date (Opera v15 - 26).

Swept TabThis is a Microsoft Edge browser artefact. Microsoft Edge enabled users to easily manage and navigate their tabs by sweeping them into groups.

Sync DeviceThis is an Opera on Android artefact which relates to syncing.
Tab

This entry type is used by a number of different browsers and relates to an individual tab.  For most browsers, each tab will have a history of visits which will be recorded as Tab History entries; in Microsoft Internet Explorer and Edge the visit history is recorded as Travel Log entries.

Tab CollectionThis is a browser artefact which relates to a collection of tabs created by the user.
Tab GroupThis is a Sleipnir on macOS browser artefact. The entry relates to a user defined tab group.
Tab History

This entry type is used by a number of different browsers and relates to the visit history of a tab.

Tab RoamingThis is a Microsoft Internet Explorer and Edge artefact. It relates to Roaming Tabs and is similar to the Tab Entry Type. It will have a number of Travel Log entries relating to the history of this Roaming Tab.

Tab SnapshotThis is a Safari browser artefact which relates to a snapshot of a recently visited tab.
ThumbnailThis is an artefact which relates to the thumbnail image used in Speed Dial or Top Sites entries.

Top Site

This is a Safari and Chromium based browser artefact which relates to the top most visited website entries.

Top Site RemovedThis is a Safari browser artefact which relates to website entries that the user has chosen to remove from their top most visited websites.

Touch IconThis is similar to a favicon and is a file containing a small icon associated with a particular website or web page. It is usually used on mobile devices.
Travel LogThis is a Microsoft Internet Explorer and Edge browser artefact. A Travel Log entry relates to a visit for a specific Tab. The Information panel/column will provide further information about the Tab this Travel Log entry relates to.
Typed HistoryThis entry relates to a typed history entry.

Uri To AppId MappingThis is a Microsoft Edge browser artefact. It stores information relating to the user's top sites. If there is an application available for a top site then it is mapped to the information for that application within the Microsoft store.

URL AnnotationThis is an artefact from Mozilla based Android browsers. It contains an annotation key for the URL.

User DataThis is a Microsoft Internet Explorer/Edge browser artefact.

Video History

This entry relates to video content playback history.

View SourceThis is a Microsoft Internet Explorer/Edge browser artefact generated when a user views the source of a web page (normally by right-clicking on the page and selecting view source).
VLinkThis is an Opera browser artefact and represents a visited link (Opera v4 - 12).

WeeklyThis is a Microsoft Internet Explorer/Edge browser artefact. These entries relate to weekly history visits.

WindowThis is a Safari and Mozilla based browser artefact and relates to an individual window.  Each window will have tabs which will be recorded as Tab entries.

WorkspaceThis is a Microsoft Edge browser artefact that relates to the Workspaces feature.

WpnidmThis is a Windows 8/Windows 10 artefact which relates to push notifications for tiles.

Zone IdentifierThis artefact relates to files on an NTFS file system that have a Zone.Identifier Alternate Data Stream. The Zone.Identifier stream contains information relating to the source of a file and identifies files downloaded from the Internet.