The one variation I noticed was the Cookies SQLite database had a few slightly different fields: I ran Hindsight against the Edge profile (located in ~/Library/Application Support/Microsoft Edge Dev/Default) and it mostly worked. I wanted to see how this Edge variant looked from an artifacts perspective. I downloaded the dev build and did some test browsing, similar to the process outlined above. ![]() It appears that Microsoft will release a version of their new Chromium-based Edge browser for Mac! This isn't really surprising, since Chromium is cross-platform already, but it has been a while since there was a Microsoft-made browser that ran on macOS. Hindsight also parses it just fine, at least at a quick pass (I'll do more verification later): Update : Edge for macOS It uses SQLite databases, LevelDB, JSON, Chromium Cache files, and even SNSS for the Current Session/Tabs files: I processed the Edge profile like I did for the Chrome Evolution comparison, and it looks very, very similar (again, not a surprise for a Chromium-based browser). ![]() Microsoft says it has changed or removed quite a few features beyond the three I mentioned: Source: !400130&ithint=file%2cpptx&authkey=!ADAerq8JH6E4yRAĭespite these changes, behind the scenes the underlying browser data looks remarkable similar to Chrome. I'm sure there are many more subtle differences that I didn't see in my quick pass, but if you use it you are sure to get a sense of déjà vu. ![]() It looked remarkable similar to Chrome (no surprise there) but with the Google-related stuff stripped out the settings pages start with edge:// instead of chrome://, Bing is used by default instead of Google, and the account for signing into the browser is a Microsoft one rather than Google. I ran Edge through my normal testing process for a new Chrome version (installing it in a VM and running a consistent set of "user" actions). Short version: it looks a lot like Chrome and it should be easy to parse. I've been excited about Edge moving to Chromium for a while and yesterday the public dev version of Edge was released! I downloaded it from and was very curious to see how it compared (forensically) to Chrome.
0 Comments
Leave a Reply. |