the author analyzed the main properties of the Firefox SQLite database and its use in forensic investigation. Moreover, a novel algorithm is proposed to recover deleted records from unallocated space based on the fact that Firefox utilizes temporary transaction files. Jang et al. (Jang et al., 2012) described the integrity issue of forensic image corruption after acquisition and provided a novel algorithm for recovering and protecting the evidence image using recovery blocks. The recovery process is applicable when data blocks (generate by recovery blocks) are damaged