Firefox saves browser history in a sqlite database format. If you’re trying to figure out what a user browsed to or downloaded within the browser (at a high level), these are the files you want to grab. Firefox stores the history and bookmarks together in a database file named places.sqlite, which is in a user’s profile folder.

In general you would use this if you suspect a malicious file was downloaded onto a user’s machine and you’d like to figure out if came in via browsing the Internet with the Firefox browser.

Once exported or saved from a machine, you can view it using MZHistoryView. This tool will show you the URL, first visited date, last visited date, count, Title, Link or typed URL and other useful information for piecing together what occured.