https://arran4.github.io/blog/categories/forensics/Recent content in forensics on Arrans Technical blogHugo -- gohugo.ioentechnicalblog123@arran4.com (Arran Ubels)technicalblog123@arran4.com (Arran Ubels)Arran Ubels. This work is licensed under a <a rel="license" href="http://creativecommons.org/licenses/by-sa/4.0/">Creative Commons Attribution-ShareAlike 4.0 International License</a>.Mon, 06 Apr 2026 01:03:38 +0000https://arran4.github.io/blog/post/2026/009-forensic-recovery-of-lost-tabs/Mon, 06 Apr 2026 01:03:38 +0000technicalblog123@arran4.com (Arran Ubels)https://arran4.github.io/blog/post/2026/009-forensic-recovery-of-lost-tabs/1. Introduction I recently lost a Firefox window during shutdown, and unfortunately, it was not saved in the session restore. It was a window filled with extensive research, consisting of many tabs meticulously grouped. Losing it meant losing a significant amount of context and work. 2. Initial Attempts (and why they failed) My first instinct was to use standard Firefox features. I checked &ldquo;Restore Previous Session&rdquo; and &ldquo;Recently Closed Windows,&rdquo; but the window simply was not there.