Mozilla firefox browsing artifacts in 3 different anti-forensics modes

Abstract

There are several techniques which can assist a user to avoid leaving traces (Digital Evidence) of Internet activity so that one can frustrate forensic investigation. In this paper we examined three different usage scenarios of Internet browsing using Mozilla Firefox. These different usage scenarios were a sandbox environment, browsing with portable tools, and browsing with virtual box. We tried to find the artifacts created and left by web browsing activities in each of these usage scenarios. In our experiments, we performed identical web browsing activity for each of the three scenarios and investigated whether the traces were left behind.