Skip to content

Python scripts for parsing the index file and individual cache files from the cache2 folder of Firefox defaulted on in version 32

Notifications You must be signed in to change notification settings

Nickwiz/FirefoxCache2

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

18 Commits
 
 
 
 
 
 

Repository files navigation

FirefoxCache2

Python scripts for parsing the index file and individual cache files from the cache2 folder of Firefox defaulted on in version 32

##Blogs Written by @JamesHabben:
http://encase-forensic-blog.guidancesoftware.com/2015/02/firefox-cache2-storage-breakdown.html

Written by @sandersonforens:
http://sandersonforensics.com/forum/content.php?216-Converting-the-new-Firefox-cache2-files-to-an-SQLite-DB-for-investigating

##Usage

usage: firefox-cache2-file-parser.py [-h] [-f FILE] [-d DIRECTORY] [-o OUTPUT]

Parse Firefox cache2 files in a directory or individually.

optional arguments:
  -h, --help            show this help message and exit
  -f FILE, --file FILE  single cache2 file to parse
  -d DIRECTORY, --directory DIRECTORY
                        directory with cache2 files to parse
  -o OUTPUT, --output OUTPUT
                        CSV output file
usage: firefox-cache2-index-parser.py [-h] [-o OUTPUT] file

Parse Firefox cache2 index file.

positional arguments:
  file                  index file to parse

optional arguments:
  -h, --help            show this help message and exit
  -o OUTPUT, --output OUTPUT
                        CSV output file

#Commercial Tools Parsing Cache2

Company Tool URL
Digital Detective NetAnalysis & HstEx http://www.digital-detective.net/digital-forensic-software/netanalysis/
Foxton Software Browser History Viewer (Free) http://forensic-software.co.uk/browser-history-viewer/
NirSoft MozillaCacheView (Free) http://www.nirsoft.net/utils/mozilla_cache_viewer.html
Magnet Software Internet Evidence Finder http://www.magnetforensics.com/

About

Python scripts for parsing the index file and individual cache files from the cache2 folder of Firefox defaulted on in version 32

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%