firefox_parse_indexeddb_tool
Parse Firefox IndexedDB records from the profile's storage/default directory to extract database contents for forensic examination.
Instructions
Parse Firefox IndexedDB records from storage/default/*/idb. Typical profile path: "C:\Users<user>\AppData\Roaming\Mozilla\Firefox\Profiles<rand>.default-release".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of IndexedDB records to return | |
| host_id | No | Optional exact storage/default origin directory filter | |
| profile_path | Yes | Absolute path to the Firefox profile directory | |
| database_name | No | Optional exact IndexedDB database name filter | |
| object_store_name | No | Optional exact object store filter |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||