I’ve attempted to take Firefox’s profile directory, extract the contents to a Window based machine, and then use FoxAnalysis to decrypt the information present.
FoxAnalysis seems pretty decent as a browsing analysis tool for windows machines, like WebHistorian. I ran against my Vista machine, it was able to provide a huge amount of info… Downloads, pages accesses including dates, frequency of accesses, passwords. This could make the times for analyzing a machine so much quicker and able to be put in a formatted report easier.
I took a fresh linux box, surfed around the interweb a bit. Googled a few items, downloaded a thing or two, and various other stuff. I didn’t save any passwords (I will try that later). Steps and times were written down.
I then exported the profile out, and ran FoxAnalysis against it on my Vista machine.
Linux based Firefox3 profiles are able to analyzed with FoxAnalysis with Great Accuracy! Searches were there, my downloads were shown, queries were present.
This is a HUGE time saver for Analysis. I took that Linux box, imaged, and initiated a case in Autopsy. Info is there, but much harder to read, making it easier to loose valuable data.