iexplore.history

$ target-query <path/to/target> -f iexplore.history
Details

Module

dissect.target.plugins.apps.browser.iexplore.InternetExplorerPlugin

Output

records

Module documentation

Internet explorer browser plugin.

Function documentation

Return browser history records from Internet Explorer.

Yields BrowserHistoryRecord with the following fields:

ts (datetime): Visit timestamp.
browser (string): The browser from which the records are generated from.
id (string): Record ID.
url (uri): History URL.
title (string): Page title.
description (string): Page description.
rev_host (string): Reverse hostname.
visit_type (varint): Visit type.
visit_count (varint): Amount of visits.
hidden (string): Hidden value.
typed (string): Typed value.
session (varint): Session value.
from_visit (varint): Record ID of the "from" visit.
from_url (uri): URL of the "from" visit.
source: (path): The source file of the history record.