FireFox 41.0.1 Browsing session analysis - cookies.sqlite

Finally, let's look into the cookies.sqlite file. This file stores the relevant cookie information for each website which provides a cookie.

Let's open the cookies.sqlite file and take a look at the tables








Here we see there is one table "moz_cookies".

Using the same methods we learnt in the formhistory.sqlite and places.sqlite post, let's open the moz_cookies table.








Above we see a snapshot of some of the cookies which have been stored.

Other posts in this series:

FireFox 41.0.1 Browsing session analysis
FireFox 41.0.1 Browsing session analysis - Creating a Forensic copy of a USB Thumb drive using dc3dd
FireFox 41.0.1 Browsing session analysis - Mounting a dc3dd image
FireFox 41.0.1 Browsing session analysis - formhistory.sqlite
FireFox 41.0.1 Browsing session analysis - places.sqlite
FireFox 41.0.1 Browsing session analysis - cookies.sqlite

Well that's it for this series.