Are there any tools that parse the individual records from the Chrome history file (and Safari if possible) and display it in hex. EnCase 6 will do this for firefox places.sqlite. I just need an example of what the hex looks like of an individual record. I haven't been able to find information on the header and footer of the individual records.
Thanks
I dont think you can look at these Internet history records as 'individual' in the same manner that can be applied to an Index.dat record. It appears from a cursory glance on my part that these records are stored in tables that make up a relational database and therefore the whole record can only be understood by using this logical schema. I have examined Chrome records by replacing the User data folder associated with my own Chrome profile with that taken from an examination machine.