Skip to content

Browser Reviewer is a portable forensic tool for analyzing user activity in Firefox and Chrome-based browsers. It extracts and displays browsing history, downloads, bookmarks, and autofill data. The tool allows analysts to tag, comment, and export reports in PDF.

License

Notifications You must be signed in to change notification settings

gustavoparedes/Browser-Reviewer

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

45 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Browser-Reviewer

Browser Reviewer is a portable forensic tool for analyzing user activity in Firefox and Chrome-based browsers for Windows platforms. It extracts and displays browsing history, downloads, bookmarks, and autofill data. The tool allows analysts to tag, comment, and export reports in PDF.

It requires no installation and can be executed directly from a USB drive or over a network share — ideal for forensic workflows with minimal footprint on the target system.

Download compiled version here.

What’s New (v0.2 — 2025-10-01)

  • Better display scaling: Improved support for different screen resolution, configurable font family and size more consistently across laptops, external monitors and projectors.
  • Time-range + Categories fix: Resolved the SQL logic error that could occur when clicking on categories while a time-range search was active.
  • PDF exporting, improved: More reliable layout, better table pagination, and clearer metadata on the first page.
  • New: Export to HTML: Export the current view as a standalone HTML Report with built-in filtering and sorting (works offline in any modern browser).
  • HTML Reports: Interactive headers for sorting, a search box for quick filtering, and a compact summary.
  • Command-line execution (CLI mode) for headless or automated runs "Browser Reviewer.exe -h".

Features

  • Extracts and visualizes browser artifacts from Firefox and Chrome/Chromium-based browsers (history, downloads, bookmarks, autofill).
  • Label Manager to tag items and Comments to annotate findings.
  • Powerful search: simple text or RegExp.
  • Time zone offset control (consistent timestamps across cases).
  • Command-line execution (CLI mode) for headless or automated runs. ← new in v0.2
  • Export options:
    • PDF (improved pagination & layout). ← v0.2 improvements
    • HTML Report with client-side filter/sort. ← new in v0.2

Exporting

PDF

Use Export → PDF to generate a paginated report of the current grid.

HTML

Use Export → HTML to generate a standalone HTML file:

  • Sortable columns (click column headers)
  • Quick filter (search box)
  • Self-contained (no server required; opens in any modern browser)
  • Summary block (rows exported, visible columns, active sort/filter, export timestamp, time zone)

Changelog

v0.2 — 2025-10-01

  • Improved scaling for different resolutions.
  • Fixed SQL logic error when clicking categories with an active time-range search.
  • Better PDF export (layout, pagination, summary).
  • New Export to HTML and interactive HTML Reports (filter & sort).

v0.1 — 2025-07-02

  • Initial public release with Firefox/Chrome artifacts, labels, comments, PDF export.

imagen

🚀 Getting Started

🔍 Extracting Browser Artifacts

To begin analyzing browser activity:

  1. Go to File > New

imagen

  1. Choose a file name for the new project.

imagen

  1. Click "Scan Web Activity" and select the directory where browser artifacts should be searched. Make sure you have read access to the selected path.

imagen

Browser Reviewer will scan the selected path for supported browser artifacts from Firefox and Chrome/Chromium-based browsers, including:

  • 🕓 Browsing history
  • ⬇️ Download history
  • 🔖 Bookmarks
  • 🧠 Autofill form data

Once processed, the data will appear in the main table, where you can filter, search, tag, and comment on individual entries.

  • Use the Label Manager to create and assign custom tags to records.

imagen

  • Set the UTC offset at the top of the interface to adjust all timestamps to the correct time zone.

imagen

  • Quickly review user behavior by sorting records chronologically and observing the Potential Activity field.

imagen

and applying filters as needed.

By category:

imagen

or by potential activity, for example.

imagen

  • Use the search bar to perform simple keyword filtering

imagen

or advanced regular expression (RegExp) searches.

imagen

  • Visualize and explore data from browser artifacts such as browsing history, downloads, bookmarks, and autofill entries. Browsing history is automatically categorized and tagged based on potential user activity, helping to identify relevant patterns and behaviors.

    History

imagen

Downloads

imagen

Bookmarks

imagen

  • Define and apply labels and comments to annotate findings of interest during the review.

imagen

  • And export results as PDF

imagen

  • Command-line execution (CLI mode)

C:\Users\gustavo\Desktop\Test\Browser Reviewer>>"Browser Reviewer.exe" -h

                Browser Reviewer v0.2 - CLI

                Usage:
                  Browser_Reviewer.exe <BaseNameOrPath(.bre)> <RootDirectoryToScan>

                Parameters:
                  <BaseNameOrPath(.bre)>   Name or full path of the .bre database file to create.
                                           If no extension is provided, .bre will be added automatically.
                  <RootDirectoryToScan>    Root folder where browser artifacts will be searched.

                Examples:
                  Browser_Reviewer.exe MyCase "D:\Evidence\UserProfile"
                  Browser_Reviewer.exe "C:\Cases\Case123.bre" "E:\Mounts\Image01"

                Help flags:
                  /?   -?   -h   --help

About

Browser Reviewer is a portable forensic tool for analyzing user activity in Firefox and Chrome-based browsers. It extracts and displays browsing history, downloads, bookmarks, and autofill data. The tool allows analysts to tag, comment, and export reports in PDF.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages