...
Entry Type | Information | |
---|---|---|
Address | Mozilla Firefox allows autofill addresses to be saved so that forms can be quickly completed from a drop-down list of saved addresses. | |
AppCache | These entries relate to application cache. HTML5 introduces application cache, which means that a web application is cached, and accessible without an internet connection. Application cache gives an application three advantages:
| |
AppCacheEntry | ||
Archived | This is a Chromium based browser artefact which relates to archived history entries stored in the Archived History database (Chrome v1 - 36). | |
Audio Queue | This is an Epic Privacy Browser on Android artefact which relates to the Audio Queue feature where Epic will read aloud queued web pages. Epic can read a set of webpages, to the user, using Android's text-to-speech functionality. For any webpage the user wants to read, they click on the menu and select "Add to Audio Queue". When they are ready to listen to the pages, they select Audio Queue from the menu. | |
Audit Cookie | This is a Chromium based browser artefact which relates to access context auditing of client-side cookies. | |
Audit Storage | This is a Chromium based browser artefact which relates to access context auditing of client-side storage. | |
Autocomplete Predictor | This is a Chromium based browser artefact which relates to autocomplete network action predictor entries stored in the Network Action Predictor database. | |
Autofill | This is a Chromium based browser artefact which relates to the auto-completion data for a form entry. | |
Autofill Correction | This is a Safari browser artefact which relates to user corrections of their autofill data. | |
Autofill Profile | Chromium based browsers allow autofill profiles to be saved so that forms can be quickly completed from a drop-down list of saved profiles. | |
BackgroundTransferApi | This is a Microsoft Internet Explorer/Edge browser artefact. The Background Transfer API enables advanced download and upload transfer capabilities within an app. See the following for further information: | |
BingPageData | This is a Microsoft Internet Explorer/Edge browser artefact. | |
Blocked Resource | This entry relates to a blocked tracker on the Brave browser. These can be either items blocked by Brave Shields or the Brave VPN feature. | |
Bookmark | This entry relates to a bookmarked web page or website. | |
Bookmark Folder | This entry relates to a folder for storing bookmarks. Most browsers allow the user to store their bookmarked pages in a folder hierarchy. | |
Bookmark Label | This is a Sleipnir on macOS browser artefact. The entry relates to a user defined bookmark label. | |
Bookmark Label Group | This is a Sleipnir on macOS browser artefact. The entry relates to a user defined bookmark label group. | |
Bookmark Separator | This entry relates to a bookmark separator item. Some browsers allow the user to manage bookmarks by adding separators to help distinguish different bookmark categories from each other. | |
Bookmark Tag | Many Mozilla based browsers allows the user to categorize their bookmarks by adding tags to help identify them. | |
Bounce Tracking | ||
Cache | This entry relates to an item which has been cached. A cache is a repository for storing data that is used to expedite the process of retrieving that data. Caches are used to speed up the browsing process so that data does not have to be fetched from its original location every time a page or cached object is requested. | |
Client | This is a Mozilla Firefox on Android artefact which relates to a client device that has been connected to a user's Firefox Account. | |
Collection | This entry relates to the Microsoft Edge browser Collections feature which allows the user to save and group information found on the Internet. | |
Collection Item | This entry relates to the Microsoft Edge browser Collections feature. The user can organise individual items into collections. | |
Compromised Credentials | Google Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach. | |
Container | This entry relates to the Mozilla Firefox browser Containers feature which allows the user to segregate their browsing activity into distinct contexts to preserve privacy. | |
Cookie | This entry relates to a cookie. A cookie is the term given to describe a type of message that is sent from a website to a browser when browsing a web page. If the server requests that the message persists, it is stored by the browser. When the user re-visits the page, the browser sends the message back to the web server to indicate a previous visit. | |
Credit Card | Various browsers allow autofill credit card information to be saved so that forms can be quickly completed from a drop-down list of saved credit cards. | |
Cross-Domain | This is a 360 Browser cross-domain cookie artefact. | |
Daily | This is a Microsoft Internet Explorer/Edge browser artefact relating to a daily visit entry. | |
Dependency Entry | These entries relate to pre-resolve and pre-connect data in Microsoft Edge and Internet Explorer. As the browser processes the HTML of a top-level page, it must perform a number of operations to be able to download the additional resources (dependencies) required to display the page. | |
Device | This is a Safari artefact which relates to sharing open tabs across the user's devices via iCloud. | |
DOM Store | Web storage and DOM storage (Document Object Model storage) are web application software methods and protocols used for storing data in a web browser. Web storage supports persistent data storage, similar to cookies but with a greatly enhanced capacity and no information stored in the HTTP request header. | |
Download | This entry relates to artefacts which have been downloaded via the web browser. | |
Drop | This entry relates to the Microsoft Edge browser Drop feature. The user can send files and notes from Edge and the content is then synced across their devices. It allows Edge users to transfer files and notes between all Edge instances on all devices that Edge is used on. To use the feature, the user needs to sign in to a Microsoft Account and click on the Paper Airplane icon on the toolbar. | |
Favicon | A favicon, also known as a shortcut icon, website icon, tab icon or bookmark icon, is a file containing one or more small icons associated with a particular website or web page. | |
Favorite | A favorite entry is a browser artefact which allows the user to save bookmarks to favourite web pages for later retrieval. | |
Favorite Folder | A favorite folder entry for the Microsoft Edge browser relates to a folder for storing bookmarks. The user can organise their Favorites into folders. | |
Feedplat | This is an Microsoft Internet Explorer/Edge browser artefact relating to RSS feeds. | |
Form History | Most browsers can save information every time the user completes a form so that the next time they access a form, they will see a drop-down list of options to choose from. | |
Gallery | This is an Opera Neon browser artefact. The entry relates to the screenshots and web page shortcuts saved by the user into the web browser's gallery. | |
History | This entry relates to a standard history visit. | |
History Provider | This is a Chromium based browser artefact which relates to autocomplete candidates which have been sourced from the user's history stored in their History Provider Cache. | |
History Tombstone | This is a Safari browser artefact which relates to deleted history visits. | |
Host | This is a Mozilla based browser artefact which relates to host entries taken from either the user's history or bookmarks. This is not related to the Host scheme found in Microsoft Internet Explorer/Edge daily history entries. | |
Hsts Entry | These are HTTP Strict Transport Security (HSTS) entries. HSTS prevent protocol downgrade attacks and cookie hijacking by forcing web browsers to interact with websites only via secure HTTPS connections (and never HTTP). | |
IECompatCache | This is a Microsoft Internet Explorer/Edge browser artefact which relates to the browser Compatibility View list. This is a list of sites that will be displayed in Compatibility View. Sites which appear in the Compatibility View list are sites for which other users have clicked the Compatibility View button. This list is updated automatically by Microsoft and is not necessarily related to any visits made by the user. | |
IECompatUA | ||
IEFlipahead | This is a Microsoft Internet Explorer/Edge browser artefact. Flip ahead allows the user to explore favorite websites like they would a magazine. By implementing flip ahead, the web developer enables their users to flip through a news article or an online catalogue, regardless of their actual location on the page. Visitors no longer need to click a Next button to go to the next page. | |
IETldCache | This is a Microsoft Internet Explorer/Edge browser artefact. This data is not related to user activity and is generated by Microsoft. | |
Index | This is a Chromium based browser artefact which relates to entries containing text based content from web pages stored in the History Index database (Chrome v1 - 29). It can also be a Safari browser artefact containing text based content from web pages that the browser uses for indexing and searching. | |
Input History | This is a Mozilla based browser artefact which relates to URLs typed by the user. | |
Insecure Credentials | Google Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach. | |
Leak | This is a Microsoft Internet Explorer/Edge browser artefact. Leak entries relate to cache or cookie entries that have been scheduled for deletion and have not yet been removed by the cache scavenger. | |
Leaked Credentials | Google Chrome has a security feature designed to alert the user if the password they are using has been found previously exposed in a data breach. | |
Logged In Predictor | This is a Chromium based browser artefact which relates to logged in predictor entries stored in the Network Action Predictor database. | |
Logins | This is a Mozilla based browser artefact which relates to website login username and password entries stored in the logins.json file (Firefox v32.0+). | |
Login Data | This is a Chromium based browser artefact which relates to website login username and password entries. | |
Login Exception | This is a Mozilla Firefox on Android artefact which relates to login information. When selected, the browser will not save the username or password and will not prompt the user for this information. | |
Login Stats | This is a Chromium based browser artefact which relates to the statistics of user interactions with a website. | |
Logins Disabled | This is a Mozilla based browser artefact which relates to host entries stored in the logins.json file for which the user has declined to store login information (Firefox v32.0+). | |
Master | This is a Microsoft Internet Explorer/Edge browser artefact. Master entries relate to master history entries. | |
Media History | This is a Samsung Internet browser artefact which relates to media content history played in the browser. | |
Metrics | ||
Most Visited | This is a Mi Browser and Mint Browser artefact which relates to the most visited searches made by a user. | |
Navigation History | This is a Microsoft Edge browser artefact and relates to tab history and navigation through the tab. The entry may also have additional metadata about a related product item. | |
Note | This is an Opera browser artefact which relates to user created notes (Opera v7 - 12). | |
Note Attachment |
| |
Note Folder | This is an Opera browser artefact which relates to a folder for storing notes. This allows the user to store their notes in a folder hierarchy (Opera v7 - 12). | |
Note Separator | This is an Opera browser artefact which relates to a note separator item. This allows the user to manage notes by adding separators to help distinguish different categories of notes from each other (Opera v7 - 12). | |
Notification | This is a Chromium based browser artefact which relates to website notifications. Website notifications are pop-up messages or alerts displayed by websites to notify users about new content or events even when the website is not actively being viewed. These notifications can be triggered by various events, such as new messages, updates, or notifications from social media, news websites, or other web services. When a user receives a notification, it typically appears as a pop-up message or alert in the corner of the screen or in the system tray. The notification may contain a title, message, and sometimes an image or icon related to the content or event being notified. Users can interact with notifications by clicking on them, which may open the corresponding website or perform an action, such as marking a message as read or dismissing the notification. | |
Offline Page | This is an artefact which is found on Android platforms. This allows a user to save web pages to read later, even if the user is offline. | |
Origin | This is a Mozilla based browser artefact which relates to host entries from the user's history. | |
Page Icon | This is an Opera Neon browser artefact. The entry relates to the icons associated with a particular website or web page. | |
Page Metadata | This is a Mozilla based browser artefact, which can be found on iOS platforms. It relates to web page metadata. | |
Password Monitor | This is an Microsoft Edge browser artefact which relates to compromised passwords identified by the Password Monitor feature. | |
Permission | This artefact relates to permission settings for a website which have been overridden by the user. | |
Playback | This is a Chromium based browser artefact which relates to media playback history. | |
Playback Session | This is a Chromium based browser artefact which relates to media playback sessions. | |
Playlist | This is a Brave on iOS artefact which relates to media content from a user created playlist. | |
Playlist Folder | This is a Brave on iOS artefact which relates to media content from a user created playlist. | |
Popup Tracking | ||
Preferences | This artefact relates to the preferences used by the browser. The associated name/value pairs can be found in the Properties window. | |
PrivacIE | This is a Microsoft Internet Explorer/Edge browser artefact and relates to InPrivate Filtering. InPrivate Filtering helps prevent the websites a user visits from automatically sending details about the visit to other content providers. | |
Profile | This is a Safari browser artefact introduced in Safari v17. A user can use profiles to keep their browsing separate for topics such as work or personal. Each profile has separate artefacts such as history, cookies, website data, tab groups and favourites. | |
Protection | This is a Mozilla based browser artefact which relates to the recording of per day content blocking events. | |
Quick Access | This is a Samsung Internet browser artefact which relates to website shortcuts on the browser homepage. | |
Quota Usage | This is a Chromium based browser artefact which relates to the management of storage limits and eviction of client-side web data storage. | |
Reading List | This relates to a Reading List entry. During a browsing session, if the user identifies a page to be viewed at a later date, they can add it to a Reading List. | |
Reading List (View) | This entry relates to web pages which has been added to the Reading List whilst in Reading View mode. Reading View mode allows the user to view a page in a clutter-free, reader-friendly view. | |
Recent History | This is a UC Browser on Android artefact which relates to recent history. | |
Recovery Store | This entry relates to Microsoft Internet Explorer and Edge. The Recovery Store file contain information relating to browsing sessions. It was designed to allow the browser to recover from a crash and re-open tabs. Each Recovery Store file contains information relating to various tab sessions. The tab session files contain information relating to the various tabs that have been visited along with their order. See the Tab Entry Type. | |
Redirect | This entry relates to server-side redirects. | |
Registry | This entry relates to browser artefacts read from the Windows Registry. | |
Remote Device | This is a Mozilla Firefox artefact which can be found on mobile platforms. It relates to remote device syncing. | |
Resource Prefetch Predictor | This is a Chromium based browser artefact which relates to resource prefetch predictor entries stored in the Network Action Predictor database. | |
Reward | This is a Brave browser artefact which relates to Brave Rewards. | |
Saved Page | When closing the application, some browsers prompt the user and ask if they wish to save the open page(s) (such as 360 Security browser). This entry relates to pages that have been saved by the user so that they can be visited at a later date. | |
Search Engine | This is a Chromium based browser artefact which relates to search engine keyword entries stored in the Web Data database. | |
Search Term | This entry relates to a search term history entry. | |
Segment Usage | This is a Chromium based browser artefact. It stores URL segment information which is used for the most visited page view in the web browser. | |
Server Address | This is a Chromium based browser artefact which relates to Google Wallet autofill address entries stored in the Web Data database. | |
Server Credit Card | This is a Chromium based browser artefact which relates to Google Wallet autofill credit card entries stored in the Web Data database. | |
Session | This is used by different browsers and relates to a user's browsing session. Depending on the browser, a session can have windows, tabs and cookies which will be recorded as separate Window, Tab, Tab History and Cookie entries. | |
Session Task | This is a Min Browser artefact which relates to a saved Task. Each Task will have tabs and tab history which will be recorded as Tab entries and Tab History entries. | |
Shortcut | This is an artefact which relates to Omnibox shortcut entries. | |
Sign On | This is a Mozilla based browser artefact which relates to website login username and password entries stored in the sigons.sqlite database (Firefox v3 - 31). | |
Sign On Disabled | This is a Mozilla based browser artefact which relates to host entries stored in the sigons.sqlite database for which the user has declined to store login information (Firefox v3 - 31). | |
Signed In User | ||
Site Preferences | This is a Safari browser artefact which relates to the site preferences of a web page. | |
Snapshot | This is an Android Browser artefact which relates to webpage snapshots. | |
Speed Dial | This is an Opera browser artefact which relates to website shortcuts on the browser homepage. | |
Starred | This is an Opera browser artefact which relates to favourite website shortcuts on the browser homepage. | |
Stash | This relates to an Opera browser artefact which allows the user to store web pages to be viewed at a later date (Opera v15 - 26). | |
Swept Tab | This is a Microsoft Edge browser artefact. Microsoft Edge enabled users to easily manage and navigate their tabs by sweeping them into groups. | |
Sync Device | This is an Opera on Android artefact which relates to syncing. | |
Tab | This entry type is used by a number of different browsers and relates to an individual tab. For most browsers, each tab will have a history of visits which will be recorded as Tab History entries; in Microsoft Internet Explorer and Edge the visit history is recorded as Travel Log entries. | |
Tab Collection | This is a browser artefact which relates to a collection of tabs created by the user. | |
Tab Group | This is a Sleipnir on macOS browser artefact. The entry relates to a user defined tab group. | |
Tab History | This entry type is used by a number of different browsers and relates to the visit history of a tab. | |
Tab Roaming | This is a Microsoft Internet Explorer and Edge artefact. It relates to Roaming Tabs and is similar to the Tab Entry Type. It will have a number of Travel Log entries relating to the history of this Roaming Tab. | |
Tab Snapshot | This is a Safari browser artefact which relates to a snapshot of a recently visited tab. | |
Thumbnail | This is an artefact which relates to the thumbnail image used in Speed Dial or Top Sites entries. | |
Top Site | This is a Safari and Chromium based browser artefact which relates to the top most visited website entries. | |
Top Site Removed | This is a Safari browser artefact which relates to website entries that the user has chosen to remove from their top most visited websites. | |
Touch Icon | This is similar to a favicon and is a file containing a small icon associated with a particular website or web page. It is usually used on mobile devices. | |
Travel Log | This is a Microsoft Internet Explorer and Edge browser artefact. A Travel Log entry relates to a visit for a specific Tab. The Information panel/column will provide further information about the Tab this Travel Log entry relates to. | |
Typed History | This entry relates to a typed history entry. | |
Uri To AppId Mapping | This is a Microsoft Edge browser artefact. It stores information relating to the user's top sites. If there is an application available for a top site then it is mapped to the information for that application within the Microsoft store. | |
URL Annotation | This is an artefact from Mozilla based Android browsers. It contains an annotation key for the URL. | |
User Data | This is a Microsoft Internet Explorer/Edge browser artefact. | |
Video History | This entry relates to video content playback history. | |
View Source | This is a Microsoft Internet Explorer/Edge browser artefact generated when a user views the source of a web page (normally by right-clicking on the page and selecting view source). | |
VLink | This is an Opera browser artefact and represents a visited link (Opera v4 - 12). | |
Weekly | This is a Microsoft Internet Explorer/Edge browser artefact. These entries relate to weekly history visits. | |
Window | This is a Safari and Mozilla based browser artefact and relates to an individual window. Each window will have tabs which will be recorded as Tab entries. | |
Workspace | This is a Microsoft Edge browser artefact that relates to the Workspaces feature. | |
Wpnidm | This is a Windows 8/Windows 10 artefact which relates to push notifications for tiles. | |
Zone Identifier | This artefact relates to files on an NTFS file system that have a Zone.Identifier Alternate Data Stream. The Zone.Identifier stream contains information relating to the source of a file and identifies files downloaded from the Internet. |