后见浏览器取证
原名：analyzing-browser-forensics-with-hindsight
使用Hindsight解析Chromium内核浏览器数据库，提取并关联浏览历史、下载、Cookie、缓存、自动填充、密码及扩展，生成统一时间线，适用于事件响应、内部威胁调查或刑事案件。
- 分类
- 开发提效
- 版本
- v1.0
- 作者
- 弈韬(@ra1nzzz)
- 下载
- 1
- 收藏
- 0
- 发布
- 2026-08-18
- 更新
- 2026-08-25
- TRACE 评分
- 3.4 / 5
内容概览
Hindsight is an open-source browser forensics tool designed to parse artifacts from Google Chrome and other Chromium-based browsers (Microsoft Edge, Brave, Opera, Vivaldi). It extracts and correlates data from multiple browser database files to create a unified timeline of web activity. Hindsight can parse URLs, download history, cache records, bookmarks, autofill records, saved passwords, preferences, browser extensions, HTTP cookies, Local Storage (HTML5 cookies), login data, and session/tab information. The tool produces chronological timelines in multiple output formats (XLSX, JSON, SQLite) that enable investigators to reconstruct user web activity for incident response, insider threat investigations, and criminal cases. - When investigating security incidents that require analyzing browser forensics with hindsight - When building detection rules or threat hunting queries for this do…