Skip to content

Parse "Site Characteristics Database" LevelDB#73

Merged
RyanDFIR merged 2 commits into
masterfrom
site-characteristics
Feb 2, 2021
Merged

Parse "Site Characteristics Database" LevelDB#73
RyanDFIR merged 2 commits into
masterfrom
site-characteristics

Conversation

@RyanDFIR

@RyanDFIR RyanDFIR commented Feb 2, 2021

Copy link
Copy Markdown
Owner

Parse "Site Characteristics Database" LevelDB. This database tracks high-level things about a site, such as if it changes the page's title in the background. Records may contain multiple timestamps.

Features in this PR:

  • Includes parsing of deleted records
  • Records often persist longer than URL History records and can be used to indicate a past visit to a particular site
  • The records are keyed by the MD5 hash of site's origin (ex: dfir.blog or www.google.com)
  • Added function to hash all seen origins in browser artifacts and translate MD5->Origin where possible

@RyanDFIR RyanDFIR merged commit 317a8c3 into master Feb 2, 2021
@RyanDFIR RyanDFIR deleted the site-characteristics branch February 2, 2021 23:24
@RyanDFIR RyanDFIR added this to the Content Settings milestone Apr 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant