Pro plugin

Firefox Browser

Collects Firefox browsing history, downloads, bookmarks, cookies, form history, logins, extensions, and sessions

browser.firefoxPromacOS 10.12+v1.0.0browseruserweb

Run this plugin

Trigger collection for Firefox Browser on its own with the --plugin flag, or include it in a wider sweep by category.

# Just this plugin
macfor-pro collect --plugin browser.firefox --output ./evidence.zip

# Dry run — list what would be collected
macfor-pro collect --plugin browser.firefox --dry-run

Compatibility

macOS 10.12+

Licensing: ships in the macfor-pro binary. See Community vs Pro.

Artifacts collected (14)

Each row corresponds to an entry in the plugin's artifacts.yaml manifest. Optional artifacts are skipped unless explicitly enabled.

history

Artifact	Format	Path	Notes
Places Database places	sqlite	`~/{variant_path}/{profile}/places.sqlite`	—

cookies

Artifact	Format	Path	Notes
Cookies cookiesOptionalSensitive	sqlite	`~/{variant_path}/{profile}/cookies.sqlite`	—

autofill

Artifact	Format	Path	Notes
Form History formhistoryOptionalSensitive	sqlite	`~/{variant_path}/{profile}/formhistory.sqlite`	—

config

Artifact	Format	Path	Notes
Site Permissions permissionsOptional	sqlite	`~/{variant_path}/{profile}/permissions.sqlite`	—
Preferences preferencesOptional	text	`~/{variant_path}/{profile}/prefs.js`	—
Content Preferences content_prefsOptional	sqlite	`~/{variant_path}/{profile}/content-prefs.sqlite`	—
Search Engines searchOptional	binary	`~/{variant_path}/{profile}/search.json.mozlz4`	—
Profile Timestamps timesOptional	json	`~/{variant_path}/{profile}/times.json`	—
Container Tabs containersOptional	json	`~/{variant_path}/{profile}/containers.json`	—

credentials

Artifact	Format	Path	Notes
Saved Logins loginsOptionalSensitive	json	`~/{variant_path}/{profile}/logins.json`	—

extensions

Artifact	Format	Path	Notes
Extensions extensionsOptional	json	`~/{variant_path}/{profile}/extensions.json`	—

session

Artifact	Format	Path	Notes
Session Store sessionOptional	binary	`~/{variant_path}/{profile}/sessionstore-backups/recovery.jsonlz4` +2 more ~/{variant_path}/{profile}/sessionstore-backups/recovery.baklz4 ~/{variant_path}/{profile}/sessionstore-backups/previous.jsonlz4	—

cache

Artifact	Format	Path	Notes
Favicon Cache faviconsOptionallow value	sqlite	`~/{variant_path}/{profile}/favicons.sqlite`	—

storage

Artifact	Format	Path	Notes
Web Storage webappsstoreOptional	sqlite	`~/{variant_path}/{profile}/webappsstore.sqlite`	—