Retrieving Data from Thunderbird and Firefox
Reading data from Mozilla products such as Thunderbird and Firefox has never been much of a challenge during engagements. Like many Windows applications, they both use SQLite databases to store their information – and unlike other “similar” products e.g. Google Chrome, these databases aren’t encrypted and can easily be read once they’ve been exfiltrated from…