# Vivaldi Form History

## Overview

**Evidence:** Vivaldi Form History\
**Description:** Collect Vivaldi Form History\
**Category:** Applications\
**Platform:** windows\
**Short Name:** vfh\
**Is Parsed:** Yes\
**Sent to Investigation Hub:** Yes\
**Collect File(s):** No

## Background

Browser form history stores previously entered form data including search queries, usernames, and other input fields. This data reveals user search patterns, account information, and potential data leakage through autofill.

## Data Collected

This collector gathers structured data about vivaldi form history.

### Vivaldi Form History Data

| Field          | Description    | Example                   |
| -------------- | -------------- | ------------------------- |
| `UserName`     | User Name      | Example value             |
| `BrowserName`  | Browser Name   | Example value             |
| `Name`         | Name           | Example value             |
| `Value`        | Value          | Example value             |
| `ValueLower`   | Value Lower    | Example value             |
| `Count`        | Count          | 123                       |
| `Profile`      | Profile        | Example value             |
| `Path`         | Path           | Example value             |
| `DateCreated`  | Date Created   | 2023-10-15 14:30:25+03:00 |
| `DateLastUsed` | Date Last Used | 2023-10-15 14:30:25+03:00 |

## Collection Method

This collector queries the browser's form history database to extract saved form field data, search queries, and associated timestamps.

## Forensic Value

Form history exposes reconnaissance activities, credential enumeration attempts, search queries revealing attacker intent, and potentially sensitive information entered into web forms. Analysts can identify data exfiltration, account compromise indicators, and targeted search patterns.