# Opera Favicons

## Overview

**Evidence:** Opera Favicons\
**Description:** Collect Opera Favicons\
**Category:** Applications\
**Platform:** linux\
**Short Name:** ofico\
**Is Parsed:** Yes\
**Sent to Investigation Hub:** Yes\
**Collect File(s):** No

## Background

Browser favicons are cached website icons that provide visual history of visited sites. This data supplements browsing history by revealing sites accessed even if history was deleted.

## Data Collected

This collector gathers structured data about opera favicons.

### Opera Favicons Data

| Field         | Description  | Example       |
| ------------- | ------------ | ------------- |
| `ID`          | ID           | 123           |
| `UserName`    | User Name    | Example value |
| `BrowserName` | Browser Name | Example value |
| `Profile`     | Profile      | Example value |
| `URL`         | URL          | Example value |
| `IconType`    | Icon Type    | 123           |
| `Path`        | Path         | Example value |

## Collection Method

This collector queries the browser's Favicons database to extract cached website icons and associated URLs.

## Forensic Value

Favicon analysis can recover evidence of deleted browsing history, identify visited sites through icon fingerprinting, and correlate with other browser artifacts to establish comprehensive activity timelines.