skills.rest
YukiIto1999
YukiIto1999COMMUNITY
Explore all skills by this author →
GitHub

analyzing-browser-forensics-with-hindsight

Parse Chromium browser artifacts and generate structured forensic timelines.

Updated Apr 23, 2026
Search Tags:#timeline#sqlite#analyze#chromium#hindsight#browser-forensics#forensics-tool
One-click install
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill analyzing-browser-forensics-with-hindsight
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: analyzing-browser-forensics-with-hindsight
Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/analyzing-browser-forensics-with-hindsight
Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill analyzing-browser-forensics-with-hindsight

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps security analysts quickly reconstruct user web activity by parsing Chromium-based browser artifacts for incident response and forensic investigations.

Core Features & Use Cases

  • Parses History, Cookies, Web Data (Autofill), Login Data, Bookmarks, Local Storage, Session Storage, and Extensions from Chromium-based browsers (Chrome, Edge, Brave, Opera).
  • Generates structured timelines and searchable reports to support threat hunting, incident response, and digital forensics.
  • Cross-platform support across Windows, macOS, and Linux with profile-based analysis.

Quick Start

Analyze a Chromium-based browser profile directory to produce a comprehensive browser-forensics timeline including history, downloads, cookies, autofill, saved passwords, and extensions.

Frequently Asked Questions about analyzing-browser-forensics-with-hindsight

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I analyze Chromium browser history and artifacts for forensic investigations?▼

This Skill parses Chromium browser profile directories to extract history, cookies, autofill, and saved passwords, generating structured forensic timelines for incident response and threat hunting.

What digital forensics data can I extract from Chrome, Edge, or Brave profiles?▼

You can extract History, Cookies, Web Data, Login Data, Bookmarks, Local Storage, Session Storage, and Extensions from Chromium-based browser profiles across Windows, macOS, and Linux platforms.

Does this browser forensics tool support parsing SQLite databases like Login Data and Web Data?▼

Yes, it parses SQLite databases including Login Data and Web Data to recover saved passwords, autofill entries, and browser extensions while reconstructing local storage timelines.

How do I generate a timeline of web activity from browser artifacts for SOC workflows?▼

You can generate an activity timeline by parsing a browser profile directory; the tool processes downloads, history, and cookies to export structured results suitable for SOC workflows.

Can I use Hindsight to reconstruct web activity across different operating systems?▼

Hindsight reconstructs web activity across Windows, macOS, and Linux by analyzing Chromium-based browser profiles, handling history, downloads, cookies, and extensions uniformly.

Related Skills

Explore More Data & Analytics Skills→
emilneuraz-aiemilneuraz-ai

memory-forensics

Extract processes, network connections, and artifacts from RAM dumps with Volatility 3.

Community
Advanced
SCStelzSCStelz
231

honeypot-investigation

Analyze honeypot servers to identify attack patterns and generate executive security reports.

Community
Advanced
ramzxyramzxy
1

ctf-forensics

Identify forensic artifacts across disk images, memory dumps, logs, and PCAPs.

Community
Advanced
untangledfinanceuntangledfinance

chrome-devtools

Automate browser testing and debugging with Puppeteer CLI scripts for Chromium-based browsers.

Official
Advanced