A browsing history database is local application storage that records browser activity and related metadata, such as visited URLs, timestamps, titles, and sometimes extra context like search terms or page classifications. It is usually stored on the endpoint, often in a structured database file that forensic tools can parse.
In cyber security, this artifact matters because it can reconstruct user activity even when a browser cache is cleared or a page list is incomplete. Defenders and investigators use it to build timelines, confirm access to web services, and identify suspicious browsing patterns tied to phishing, credential theft, or malware delivery. Attackers may try to delete, corrupt, or manipulate it to hide their tracks, so preservation and careful chain of custody are important during incident response.