Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parse "Site Characteristics Database" LevelDB #73

Merged
merged 2 commits into from
Feb 2, 2021

Conversation

obsidianforensics
Copy link
Owner

Parse "Site Characteristics Database" LevelDB. This database tracks high-level things about a site, such as if it changes the page's title in the background. Records may contain multiple timestamps.

Features in this PR:

  • Includes parsing of deleted records
  • Records often persist longer than URL History records and can be used to indicate a past visit to a particular site
  • The records are keyed by the MD5 hash of site's origin (ex: dfir.blog or www.google.com)
  • Added function to hash all seen origins in browser artifacts and translate MD5->Origin where possible

@obsidianforensics obsidianforensics merged commit 317a8c3 into master Feb 2, 2021
@obsidianforensics obsidianforensics deleted the site-characteristics branch February 2, 2021 23:24
@obsidianforensics obsidianforensics added this to the Content Settings milestone Apr 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant