Queries/README.md

• SQLite queries

  • Browsers

    • Mozilla Firefox 61+:

      • firefox_places.sql
      • firefox_favicons.sql
      • firefox_formhistory.sql
      • firefox_contentprefs.sql

    • Opera 54+

      • Opera_History.sql
      • Chrome_favicons.sql (works with Opera as well)

    • Chrome 67+

      • Opera_History.sql (works with Chrome as well)
      • Chrome_favicons.sql

  • Skype

    • Query both cache_db.db databases found at AppData\Roaming\UserProfile\media_messaging<br> 'emo_cache_v2\asyncdb' & 'media_cache_v3\asyncdb' folders

      SQLite query
      PowerShell script/sqlite query so that you can view the Hex Blob output
      Sample Output (csv)