Blog >> Vivaldi

Investigating Vivaldi Web Browser

06/12/2021 Monday

Vivaldi web browser is a cross-platform web browser developed by Vivaldi Technologies. It is best known for being fast, private, and secure as it is capable of blocking ads and trackers. What makes Vivaldi unique is that it comes in with many built-in features, and it puts the user in control of every feature. In Vivaldi, everything is an option, there are no unchangeable rules which gives the user the upper hand in setting how their browser works. The web browser is available for desktop (Windows, macOS, and Linux), and mobile devices (Android).


Digital Forensics Value of Vivaldi Artifacts


Web browser data can be critical to a digital investigation since they serve as a user's window and access point to the World Wide Web and the rest of the world as well. Web browsers have become part of our daily lives; they can reveal a significant amount of information about a user’s internet activities, synced devices, and accounts. As it stores data of every website visited, every search conducted, every image viewed, and so much more.


Location of Vivaldi Artifacts


Vivaldi web browser creates individual folders (profiles) for each user at the following location: C:\Users\%username%\AppData\Local\Vivaldi\User Data\%profilename%.default


Structure of Vivaldi Artifacts


The majority of Vivaldi web browser artifacts are maintained within SQLite database files, each contains multiple tables with information regarding the users’ actions on the software. Such as Vivaldi top sites, history, and downloads; however, some of the artifacts are stored within JSON files such as Vivaldi bookmarks and notes.


Analyzing Vivaldi Artifacts with ArtiFast Windows


This section will discuss how to use Artifast Windows to extract Vivaldi browser artifacts from Windows machines and what kind of digital forensic insights can be gained from the artifacts.

After you have created your case and added evidence for the investigation at the Artifact Parser Selection Phase, you can select Vivaldi web browser Artifacts:




ArtiFast can analyze Vivaldi Bookmarks, Current Session, Current Tabs, Downloads, Favicons, Last Session, Last Tabs, Notes, Search Terms, Speed Dials, Top Sites, URLs, and Visits. For demonstration purposes, all artifacts have been chosen but you have the option to parse artifacts individually as well.



Once ArtiFast parser plugins complete processing artifacts for analysis, they can be reviewed via “Artifact View” or “Timeline View,” with indexing, filtering, and searching capabilities. Below is a detailed description of Vivaldi artifacts in ArtiFast software.


Vivaldi Bookmarks Artifact

Vivaldi bookmarks are the shortcuts to the favorite and bookmarked webpages. The details you can view include:


Vivaldi Current Session Artifact

This artifact stores the browser's current available active session information from Vivaldi web browser. The details you can view include:


Vivaldi Current Tabs Artifact

This artifact stores the multiple open tabs in the current available active session information from Vivaldi web browser. The details you can view include:


Vivaldi Downloads Artifact

The artifact contains information about the downloaded files from Vivaldi web browser. The details you can view include:


Vivaldi Favicons Artifact

The artifact stores all the small icons associated with a particular webpage that the user has favorited. The details you can view include:


Vivaldi Last Session Artifact

This artifact stores the browser’s previous session information from Vivaldi web browser. The details you can view include:


Vivaldi Last Tabs Artifact

This artifact stores the multiple open tabs in the browser's last session from Vivaldi web browser. The details you can view include:


Vivaldi Notes Artifact

This artifact stores the notes feature data from Vivaldi web browser. The details you can view include:


Vivaldi Search Terms Artifact

This artifact stores the user entered terms. The details you can view include:


Vivaldi Speed Dials Artifact

This artifact contains the information of Vivaldi web browser speed dials. The details you can view include:


Vivaldi Top Sites Artifact

This artifact stores information about a user’s most frequently visited webpages. The details you can view include:


Vivaldi URLs Artifact

This artifact contains Vivaldi URLs information. The details you can view include:


Vivaldi Visits Artifact

This artifact contains more information about each time a URL is visited. The details you can view include:



For more information or suggestions please contact: [email protected]