__  ___      __                      _   ___         _      
   / / / (_)____/ /_____  _______  __   / | / (_)___    (_)___ _
  / /_/ / / ___/ __/ __ \/ ___/ / / /  /  |/ / / __ \  / / __ `/
 / __  / (__  ) /_/ /_/ / /  / /_/ /  / /|  / / / / / / / /_/ / 
/_/ /_/_/____/\__/\____/_/   \__, /  /_/ |_/_/_/ /_/_/ /\__,_/  
                            /____/                /___/         
    BY: Joshua C. Kelley
    VERSION: 1.0.5

Description

This script parses browser history files and extracts page titles, URLs, and timestamps. It also parses the history file for download history, returning the file path, timestamp, and size of the downloaded item.

Requirements

• PowerShell 5.0 or higher
  • May or may not work on PowerShell 4.0 or lower.
• PSSQLite
  • Supports PowerShell 2.0 and higher.
  • PS> Install-Module -Name PSSQLite
  • If you install the module from the PowerShell Gallery, it will automatically install the dependencies.

Installation

PS Gallery Installation

1. Open a PowerShell console and run the following command to install the module:

• PS> Install-Module -Name HistoryNinja * This will install the module from the PowerShell Gallery and the dependencies.

Manual Installation

1. Download the latest release of: HistoryNinja.psm1 script.

2. Unzip the contents of the archive. You should have a folder named HistoryNinja with the following files:

• HistoryNinja.psd1 - This is the module manifest.
• HistoryNinja.psm1 - This is the module.
• LICENSE - The license file.
• README.md - This file you are currently reading.

3. Copy the HistoryNinja folder to one of the following locations:

• $env:PSModulePath - any of these folders will do.

4. Open a PowerShell console and run the following command to import the module:

• PS> Import-Module HistoryNinja
  • Next, check the module's help: PS> Get-HistoryNinja -h

Compatibility

This module has been tested on the following browsers:

• Chrome
• Firefox
• Edge

The module will likely work on other electron/chromium based browsers, but has not been tested.

Usage

PS C:\> Get-HistoryNinja -b <browser name> -u <username> -o <output file type>

The use of -u requires the command also to include a -b parameter, and vice versa -b requires the command also to include a -u parameter.

PS C:\> Get-HistoryNinja -p <Path> -d <From Date> -o <output file type>

Parameters

Parameter	Type	Required	Value(s)/Examples	Description
-p	String	X if not -u	C:\Users\HistoryNinja\Downloads\History	Set path of history file to parse.
-d	String		12/12/22	Set history from date.
-u	String	X if not -p	john.doe	Username of the user to parse.
-b	String	X if using -u	Chrome, FireFox, Edge	Browser to parse. Currently, only Chromium based browsers and Firefox is supported.
-o	String		CSV, TXT, JSON	Output file type. Currently, only CSV, TXT, and JSON are supported.
-filter	String		microsoft or microsoft.com	Filter results for matching strings like the input.
-field	String	required if using -filter	Title, URL	Selects field to compare filter with.
-top	Int		10	Returns the top X results.
-tail	Int		10	Returns the last X results.
-dl	Switch			Output browser download history.
-h	Switch			Displays this help message.
-a	Switch			Displays the author of the script.
-v	Switch			Displays the version of the script.
-s	Switch			Silent. Suppresses all output to the console. Except for results when -o is not specified.

To Do

• Add support for querying multiple browsers at once.
• Add support for querying multiple users at once.
• Add support for filtering more fields.

License

This project is licensed under the GNU General Public License v3.0 - see the LICENSE file for details