# Collect browser history (Chrome example) $ChromeHistoryPath = "$env:LOCALAPPDATA\Google\Chrome\User Data\Default\History" if (Test-Path $ChromeHistoryPath) { # Copy for analysis Copy-Item -Path $ChromeHistoryPath -Destination "C:\Forensic\ChromeHistory" }