| Table of Contents |
|---|
...
We have added support for the following browsers:
Opera Neon
Opera Neon is a new concept browser: "a vision of what browsers could become". It was first released in January 2017 and is available for Mac and Windows. The browser is Chromium based but with some additional unique features. Opera Neon gives the user new ways to interact with web content, including the ability to drag, push and pop the tab icons.
NetAnalysis® will recover the standard Chromium based artefacts as well as the top sites, tab page icons and the gallery snapshots. The tab page icons and the gallery snapshots are written to the case export folder and loaded into the Viewer window.
Brave
Brave is another new, open-source, multi-platform web browser developed by Brave Software; it is based on the Chromium web browser and its Blink engine. It claims to block website trackers and remove intrusive Internet advertisements. The browser also claims to improve online privacy by sharing less data with advertising customers.
...
NetAnalysis® can read this information and display the permission settings in the Information panel.
Vivaldi Notes
Vivaldi browser allows the user to save notes while they browse. A note can be linked to a specific web page and the user can attach full page or selected area screenshots as well as files from their computer.
...
Microsoft Internet Explorer and Edge browsers keep track of browsing history in two main ways; History and Travel Log. The active tab’s list of back/forward navigations is called the Travel Log. Within Internet Explorer, you can see this list with a click-and-hold on the back or forward arrow. This data can also be used for recovering sessions in the event of the browser crashing, or by starting a new session with tabs from the last session when set as an option by the user. The browsers store this data in recovery store and tab session files.
Detection of InPrivate Browsing
...
If a user activates InPrivate browsing, the browser continues to write Travel Log data to the Recovery Store and Tab Session files. At the end of the InPrivate session, the browser deletes these files. NetAnalysis® has the ability to genuinely identify InPrivate browsing sessions and will flag them by placing an icon at the start of the URL (as shown below). HstEx® also has the ability to recover deleted InPrivate Recovery Store and Tab Session files.
| Info |
|---|
Some forensic tools claim to recover InPrivate browsing, but in fact are only searching for URLs in the Travel Log stream and have no idea whether they relate to InPrivate browsing or not. |
...
Improved Reporting
Reporting has been completely overhauled to allow reports to be generated on records filtered with a Find Panel active search as well as an active filter. Previously, reports could be generated on all rows in the grid or on the rows visible when a filter is active.
...
We have added two new dynamic filters which can be accessed by right clicking a target record. By selecting Filter By, a sub-menu will appear showing the Host Name and Browser Version strings for this record. Clicking either entry will result in a filter being applied relating to the clicked item.
Clear All Active Filters and Searches
...