This project is read-only.
1

Closed

Collect browser history

description

Uses Nirsoft's Internet Explorer History Viewer (iehv) and Mozilla History Viewer (ffhv) to pull the Internet browser history for all user profiles.
 
Checks to see if Firefox is installed before running Mozilla History Viewer
 
(This modification currently depends on the alternate version detection code I listed in the version detection issue tracker thread, but can easily be modified if another method is used.)
 
Nirsoft's IEHV is available at: http://www.nirsoft.net/utils/iehv.html
Nirsoft's FFHV is available at: http://www.nirsoft.net/utils/mozilla_history_view.html
 
ECHO.
ECHO ***************************************************************************
ECHO This section will gather information from various browsers installed
ECHO on the system.
ECHO ***************************************************************************
ECHO.
now.exe [Now gathering information from various browsers installed on the system.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
 
ECHO Running iehv on %COMPUTERNAME%.
now.exe [Running iehv on %COMPUTERNAME%.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
 
IF %OSNAME% == XP GOTO iehv_XP
IF %OSNAME% == Vista GOTO iehv_VISTA
GOTO SKIP
 
:iehv_XP
for /F %%i in ('dir /b "c:\Documents and Settings"') do iehv.exe /stab "%LOGS%:\Livecap_%COMPUTERNAME%\iehv_%%i.csv" -user "%%i" 2>> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
GOTO FINISH_IEHV
 
:iehv_VISTA
for /F %%i in ('dir /b c:\Users') do iehv.exe /stab "%LOGS%:\Livecap_%COMPUTERNAME%\iehv_%%i.csv" -user "%%i" 2>> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
GOTO FINISH_IEHV
 
:SKIP
ECHO Unable to determine Windows version - Skipped iehv.
now.exe [Unable to determine Windows version - Skipped iehv.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
 
:FINISH_IEHV
 
ECHO Test to see if Firefox is installed
now.exe [Test to see if Firefox is installed.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
IF NOT EXIST "C:\Program Files\Mozilla Firefox" GOTO SKIP
 
now.exe [Searching for Firefox profiles and running MozillaHistoryView on %COMPUTERNAME%.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
ECHO Now searching for Firefox profiles and running MozillaHistoryView.
ECHO.
ECHO !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ECHO This may generate some "The system cannot find the
ECHO path specified" error messages if a user doesn't
ECHO have a Firefox profile.
ECHO !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ECHO.
 
IF %OSNAME% == XP GOTO ffhv_XP
IF %OSNAME% == Vista GOTO ffhv_VISTA
GOTO SKIP
 
:ffhv_XP
REM Here, %%u is the list of Users on the system
REM and %%p is the list of profile directories for each user
REM This may generate some "The system cannot find the path specified" error messages
REM if a user doesn't have a Firefox profile
 
for /F %%u in ('dir /b "c:\Documents and Settings"') do for /F %%p in ('dir /b "c:\Documents and Settings\%%u\Application Data\Mozilla\Firefox\Profiles\"') do @MozillaHistoryView.exe /stab "%LOGS%:\Livecap_%COMPUTERNAME%\ffhv_%%u_%%p.csv" -file "c:\Documents and Settings\%%u\Application Data\Mozilla\Firefox\Profiles\%%p\places.sqlite" 2>> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
GOTO FINISH_FFHV
 
:ffhv_VISTA
for /F %%u in ('dir /b c:\Users') do for /F %%p in ('dir /b c:\Users\%%u\AppData\Roaming\Mozilla\Firefox\Profiles\') do @MozillaHistoryView.exe /stab "%LOGS%:\Livecap_%COMPUTERNAME%\ffhv_%%u_%%p.csv" -file "c:\Users\%%u\AppData\Roaming\Mozilla\Firefox\Profiles\%%p\places.sqlite" 2>> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
GOTO FINISH_FFHV
 
:SKIP
ECHO Firefox doesn't seem to be installed. MozillaHistoryView skipped.
now.exe [Firefox doesn't seem to be installed - MozillaHistoryView skipped.] >> %LOGS%:\Livecap_%COMPUTERNAME%\MIR-ROR.log
 
:FINISH_FFHV
Closed Mar 22, 2012 at 7:14 AM by RussMcRee
Update included in 2.0 stable release.

comments