[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-626708-105":59,"doc-detail-626708-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","forensic-analysis-of-web-browsers-lifecycle-a-case-study","Forensic analysis of web browsers lifecycle - A case study","","Widespread reliance on web applications increases exposure to cybercriminal activity, yet the same security necessities—frequent application and OS updates—complicate digital forensic investigations. This research presents a comprehensive artifact identification and collection approach for browsing activities of Firefox, Chrome, and Edge on Windows 11. It analyzes installation, execution, uninstallations, and anomalous behaviors across the full browser lifecycle, collecting artifacts from each stage and examining them via registry, memory, storage, and log locations. Experimental findings show vulnerabilities such as crashes that can cause loss of sensitive information, supporting improved browser forensic analysis and investigations.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":40,"@type":76,"position":81},"https://docshare.wps.com/document/research-report/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/forensic-analysis-of-web-browsers-lifecycle-a-case-study/626708/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/forensic-analysis-of-web-browsers-lifecycle-a-case-study/626708.png","ImageObject",300,407,{"name":92,"@type":93},"Franzy","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-28","2026-10-20",true,{"@type":102,"interactionType":103,"userInteractionCount":14},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Why do browser forensics on Windows 11 become more difficult?","Question",{"text":112,"@type":113},"Frequent updates and patches to applications and the operating system can make investigators unfamiliar with artifacts. Modern OS and application structures also add complexity to uncovering evidence.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"What stages of the browser lifecycle does the study analyze?",{"text":117,"@type":113},"The methodology covers installation, execution, uninstallations, and anomalous behaviors such as crashes and restarts across the full lifecycle.",{"name":119,"@type":110,"acceptedAnswer":120},"Which Windows 11 sources are used to analyze collected artifacts?",{"text":121,"@type":113},"Artifacts are analyzed using Windows 11 components including the registry, memory, storage, and log locations.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},626708,1793030325,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":39,"category_name":40,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":14,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":36},2336478945519,"https://ap-avatar.wpscdn.com/davatar_085a072bc5b1113ac321206ff7593b45","Journal of Information Security and Applications 85 (2024) 103839  \nContents lists available at ScienceDirect  \nJournal of Information Security and Applications  \njournal [homepage:](homepage: www.elsevier.com/locate/jisa)[ www.elsevier.com/locate/jisa](homepage: www.elsevier.com/locate/jisa)  \n| Forensic analysis of web browsers lifecycle: A case study |  |  | |\n| --- | --- | --- | --- |\n| Ahmed Raza a , Mehdi Hussain a , Hasan Tahira , Muhammad Zeeshan a , Muhammad Adil Raja b, c , Ki-Hyun Jung d, *\u003Cbr>a School of Electrical Engineering and Computer Science, National University of Sciences and Technology (NUST), Islamabad 44000, Pakistan b Regulated Software Research Center (RSRC), Dundalk Institute of Technology (DkIT), Dundalk A91 K584, Ireland\u003Cbr>c The Irish Software Research Centre, Lero, University of Limerick, Limerick, V94 T9PX, Ireland\u003Cbr>d Department of Software Convergence, Andong National University, 1375 Gyeongdong-ro, Andong-si, Gyeongbuk 36729, Republic of Korea |  |  |  |\n| A R T I C L E I N F O |  | A B S T R A C T |  |\n| Keywords:\u003Cbr>Browsers forensic Firefox forensics Chrome forensics Edge forensics Windows 11 forensics |  | The widespread integration of the internet into daily life across sectors such as healthcare, education, business, and entertainment has led to an increasing dependence on web applications. However, inherent technological vulnerabilities attract cybercriminals, necessitating robust security measures. While these security measures, including frequent updates/fixes to applications and operating systems, are essential, they also complicate forensic investigations. This research proposes a comprehensive approach to artifact identification and collection for examining browsing activities of Firefox, Chrome, and Edge on Windows 11. The methodology includes setting up and analyzing all stages of browser usage, such as installations, executions, uninstallations, and anomalous behaviors like crashes and restarts. Simulated cyber-criminal activities are used to collect artifacts at each stage, which are then analyzed using Windows 11 components such as the registry, memory, storage, and log locations. Experimental results reveal vulnerabilities, such as crashes, that can lead to the loss of sensitive information. This methodology provides a promising foundation for advancing browser forensic analysis and enhancing cybercrime investigations. |  |\n\n1. Introduction  \nThe past few decades have seen an exponential growth in technology, with the Internet becoming increasingly integrated into our everyday lives. From desktops to smartphones, technology is now an integral part of our society’s daily functioning. Microsoft Windows Operating System is a commonly used platform, owing to its preinstalled utilities, user-friendly graphical user interface (GUI), and extensive compatibility with a variety of hardware and software.  \nIn the first quarter of 2024, Windows OS held a 73.50 % market share in the global personal computer market1. The widespread adoption of personal computers has significantly improved industry efficiency. However, cybercriminals increasingly use these devices applications to commit crimes, posing challenges for investigators and law enforcement. This is further compounded by the emergence of security risks, making it difficult for investigators to keep up with frequent updates that can potentially render the applications, or even the operating  \nsystems, unknown to them.  \nOne of the most widespread methods of accessing the internet is using web browsers, with the most popular being Mozilla Firefox, Microsoft Edge, and Google Chrome on Windows 11 OS2. Typically, a regular user interacts with browsers to access the Internet; however, a suspect may also use them to collect sensitive data, hide their tracks, or even create a novel approach to their criminal activity. Finding the evidence/artifacts left behind in a browser is an important element of digital forensic investigation. Furthe","cbCaicIBrFRvfL2i","https://ap.wps.com/l/cbCaicIBrFRvfL2i","pdf",7941598,16,"English","# Introduction\n## Research gap and motivation\n## Proposed study approach and questions","[{\"question\":\"Why do browser forensics on Windows 11 become more difficult?\",\"answer\":\"Frequent updates and patches to applications and the operating system can make investigators unfamiliar with artifacts. Modern OS and application structures also add complexity to uncovering evidence.\"},{\"question\":\"What stages of the browser lifecycle does the study analyze?\",\"answer\":\"The methodology covers installation, execution, uninstallations, and anomalous behaviors such as crashes and restarts across the full lifecycle.\"},{\"question\":\"Which Windows 11 sources are used to analyze collected artifacts?\",\"answer\":\"Artifacts are analyzed using Windows 11 components including the registry, memory, storage, and log locations.\"}]","Forensic analysis of web browsers lifecycle - A case study | PDF",1792539785]