Reconstruct web activity from browser evidence.
Reconstructs a user's web activity from Chromium-based browser profiles as a unified forensic timeline.
When to use it
Use in incident response, insider-threat investigations, or criminal cases that require reconstructing a user's web activity.
Give it browser profile files; it generates a saved timeline for investigating browsing activity.
What you provide
Requires Python 3.8 or later.
Requires Hindsight to be installed; the documented installation command is pip install pyhindsight.
This skill
browser profile directories
Reads browser profile evidence