...
Google Chrome stores a transition value which identifies the type of transition between pages. These are stored in the history database to separate visits, and are reported by the renderer for page navigations. NetAnalysis now extracts and decodes the page transition value and displays the transitions in the 'Status' column. By examining the page transitions, it is possible to see how a user landed on a page. To understand the meaning of each transition, please see Page Transitions.
Figure 4 4 - Google Chrome Page Transitions
Internet Explorer Visit Count
...
Figure 3 - Updated Query Manager
...
Rebuilding and Exporting Filtered Cache Pages (and Objects)
NetAnalysis has long had the capability to rebuild either single webpages, or the entire cache in one operation. NetAnalysis v1.54 now allows the forensic examiner to rebuild part of the cache. Using the various filtering techniques available, the forensic examiner can generate a targeted subset of the browser data, and then rebuild only the live webpages (or export cached objects) contained within that subset.
For example, if you wanted to export only the moz-page-thumb files, search for "moz-page-thumb" across the imported Firefox 12 records and then select Tools » Export/Rebuild Current Filtered Cache Items. The thumbnail files can then be examined from the "Extracted Files/PNG" folder.
Add Bookmark to Multiple Records
The bookmarking feature in NetAnalysis v1.54 has been enhanced to allow the forensic examiner to bookmark many records with the same bookmark text.
The forensic examiner can create a filtered list of specific records, and then apply the same bookmark text to all of these records in one operation. The bookmark column can also be used for filtering, so this functionality is a powerful addition to the armoury.