Hindsight is a free tool for analyzing (Chrome browser) web artifacts. It started with the browsing history of the Google Chrome web browser and has expanded to support other Chromium-based applications – with more to come! Hindsight can parse a number of different types of web artifacts, including URLs, download history, cache records, bookmarks, autofill records, saved passwords, preferences, browser extensions, HTTP cookies, and Local Storage records (HTML5 cookies). Once the data is extracted from each file, it is correlated with data from other history files and placed in a timeline.
“Hindsight” is NOT new, but the “including passwords” part got my attention.
I searched the forums and did not find any previous posts on this subject.
Anyone have experience with this tool or others like it? Opinions, obversions?
The dfir.blog site hosts other utilities including “Unfurl” which I use.