Convert FF backup b...
 
Notifications
Clear all

Convert FF backup bookmarks from .json to something else?  

  RSS
Differentlayer
(@differentlayer)
New Member

Hello!
I have a case with a couple of backup files from Firefox bookmarks (bookmarks-yyyy-mm-dd.json).

There are 1500 or so bookmarks in each backup file. It would be a pain to carve every bookmark in each backup file by hand and convert the timestamps. I would like to convert the backup files in something more readable format to present for an investigator.

I have googled, searched Forensicfocus and Forensic Wiki.
The only way I have found is to use Firefoxanalysis (trial version).
At the moment money is hard to get and I wonder if there is a free alternative?

Best regards
//D

Quote
Posted : 04/01/2012 6:10 pm
BitHead
(@bithead)
Community Legend

I think the suggestion in Post #3 by mcaeby would be a good solution.

ReplyQuote
Posted : 04/01/2012 8:03 pm
hmorgan
(@hmorgan)
Active Member

a quick and dirty solution is to load the file into notepad++ and do a search and replace on the term

{"index"

and replace it with

\n{"index"

(making sure the search mode is set to extended)

this will put a new line at the start of each bookmark and make things a lot more readable.

the JSON format is hierachical but pretty simple ( http//www.json.org )

ReplyQuote
Posted : 04/01/2012 8:39 pm
AlexC
(@alexc)
Active Member

I could probably knock together a little python script together at home for this if that'd be of any use?

ReplyQuote
Posted : 04/01/2012 9:32 pm
Share: