Skip to content

Script parse the browser history (Chrome, IE, and Firefox) and push the results to elasticsearch database

License

Notifications You must be signed in to change notification settings

Whitaker-Wang/BrowserHistory_ELK

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

21 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

BrowserHistory

Script parse the browser history (Chrome, IE, and Firefox)

Usage:

alt text

Output

the script parse the browser history and get a json output from three functions:

extract_chrome_history

extract_webcachev01_dat

extract_firefox_history

the json results has a common fields among all the parser functions

@timestamp : used for the elasticsearch timeline

browser_name : the browser name

link : the url

time : same as the timestamp, the visit, downloads, etc. time

type : visitis or downloads

BrowserHistory_ELK

Script parse the browser history (Chrome, IE, and Firefox) and push the results to elasticsearch database

Usage:

This script used to push parse and push web history files to elasticsearch database change the values for: es_link: link to the elasticsearch database es_index: index to push to on the database browser: define the browser name (chrome,IE,firefox) path: path of the web history file ( chrome -> "History" file IE -> "WebCacheV01.dat" file firefox -> "places.sqlite"

the result then pushed to elasticsearch database as json

Example from Kibana

alt text

About

Script parse the browser history (Chrome, IE, and Firefox) and push the results to elasticsearch database

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Languages

  • Python 100.0%