Important Tables and Columns

Browser Data Extraction Overview

Web browsers store a wide range of data that can be valuable for various applications such as forensic investigations, recovery of lost passwords, and user activity tracking. Below is a detailed breakdown of the tables and columns used for extracting data from popular browsers like Google Chrome, Mozilla Firefox, and Microsoft Edge. The data includes, but is not limited to, saved logins, cookies, browsing history, bookmarks, credit card information, and more.

1. Google Chrome

• logins: Contains the action_url, username_value, and password_value. This table stores information about saved website logins and passwords.

• auto_fill: Stores name and value for auto-fill data used in forms and fields.

• cookies: Holds host_key, name, and value for stored cookies used by websites.

• bookmarks: Includes url and title for bookmarked URLs and their titles.

• history: Contains url and title for browsing history URLs and their corresponding titles.

• downloads: Stores url and target_path for downloaded files, including the source URL and the file's local storage path.

• credit_cards: Includes name_on_card, card_number, and expiration_details, saving the credit card information.

• extensions: Contains data about installed browser extensions, including their name and permissions.

• search_engines: Includes keyword and url, storing information about search engine configurations.

• media_engagement: Stores data like origin and last_engagement_time_usec to track media engagement.

Other tables may include usb_devices for information about connected USB devices, local_storage for locally stored data, and managed_user_passwords for passwords associated with managed users.

2. Mozilla Firefox

• moz_logins: Contains formSubmitURL, hostname, encryptedUsername, and encryptedPassword. It stores website logins and passwords.

• moz_auto_fill: Stores name and value for auto-fill data used in forms and fields.

• moz_cookies: Includes host, name, and value for stored cookies.

• moz_bookmarks: Includes url and title for bookmarked URLs and their titles.

• moz_historyvisits: Contains from_visit, place_id, and visit_date, tracking visits to URLs.

• moz_creditcards: Stores credit card information including nameOnCard and cardNumber.

• moz_places: Includes url and title for URLs visited, along with additional data such as visit count.

Other notable tables include moz_extensions for installed extensions and moz_syncedtabs for tabs synchronized across devices.

3. Microsoft Edge

• logins: Stores action_url, username_value, and password_value for saved website logins and passwords.

• auto_fill: Contains name and value for auto-fill data in forms and fields.

• cookies: Holds host_key, name, and value for stored browser cookies.

• history: Includes url and title for browsing history and visited URLs.

• downloads: Stores url and target_path for downloaded files.

• credit_cards: Contains credit card details such as name_on_card and card_number.

• top_sites: Stores url and title for the most visited sites.

• media_engagement: Includes origin and engagement data related to media.