Digital forensic analysis methodology for private browsing: Firefox and Chrome on Linux as a case study

The web browser has become one of the basic tools everyday life. A tool that is increasingly used to manage personal information. This led introduction new privacy options by browsers, including private mode. In this paper, a methodology explore effectiveness mode included in most browsers proposed. browsing session was designed and conducted Mozilla Firefox Google Chrome running on four different Linux environments. After analyzing information written disk available memory, it can be observed did not store any browsing-related hard disk. However, memory analysis reveals large amount could retrieved some environments tested. For example, for case where were executed VMware virtual machine, possible retrieve actions performed, from keywords entered search field username password log website, even after restarting computer. contrast, when run slightly hardened non-virtualized Linux, artifacts closed.