Web Browser Forensic Tools: Autopsy, BHE and Net Analysis

Abstract

Information and communication technology (ICT) are becoming an integral part of everyone´s lives which affects all sectors of human activity. Nowadays, the level of computer crimes rises and it is alarming, for such, digital forensic investigation plays a vital role in tackling computer-related crimes such as cyberbullying, fraud, cyber intrusion, hacking an et cetera. The main goal of digital forensic investigation is to preserve any evidence found in its most original form and to make sure that the evidence is not tempered. Digital forensic investigators use log files to extract, analyse and present a report based on the criminal activities found on the web browsers, such log files include history, cache, download and cookies. This survey paper evaluates the features of the three selected web browsers forensic tools namely; Browser History Examiner, Autopsy and NetAnalysis, and make comparative analysis between them. The findings of the evaluation based on the features of the selected tools shows that Autopsy is the best forensic tool among them. Therefore, in this paper, Autopsy has been recommended fora digital investigator or examiner to use as their forensic tool among others.