Session Restore

Description: Automatic Crash Recovery features built into the browser.

Location

Internet Explorer

• Windows 7/8/10:
  • C:\Users\<username>/AppData/Local/Microsoft/Internet Explorer/Recovery

Firefox

• Windows 7/8/10:
  • C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\ Profiles\<randomtext>.default\sessionstore.js

Chrome

• Windows 7/8/10:
  • C:\Users\<username>\AppData\Local\Google\Chrome\User Data\Default\
    Files = Current Session, Current Tabs, Last Session, Last Tabs

Notes:

• Historical websites viewed in each tab
• Referring websites
• Time session ended
• Modified time of .dat files in LastActive folder
• Time each tab opened (only when crash occurred)
• Creation time of .dat files in Active folder

Analysis:
Coming Soon!