I would like to check a machine's Internet browsing history and I would like to do this from the the command line or PowerShell.
Are there any Windows commands or tools for doing this?
Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.Sign up to join this community
You can view cached DNS entries from CMD.
Every time you browse to a web page, your PC has to request the IP Address for that web site from your default DNS server, and then caches them locally on your machine for a while to speed up future access to that web site — even in a private browsing session.
You can see these for yourself by opening up a command prompt and typing in
ipconfig /displaydns to see the full list of cached DNS entries.
Now, the first thing you’ll notice is that a whole lot of information will appear, to the point that all of it can’t fit in the command prompt. What you can do is take the output of the command and send it to a text file somewhere on your machine.
ipconfig /displaydns > c:\desired location
Now, when you open that file you’ll see information about the websites you've visited directly or indirectly.
To get rid of this, just type the command
ipconfig /flushdns and your DNS cache will be cleared.
Angel Luis has written a nice tutorial and script on this topic, I suggest you read it.
Perhaps check out Nirsoft's IEHistoryView, as it allows saving the resutls to a text file:
This utility reads all information from the history file on your computer, and displays the list of all URLs that you have visited in the last few days. It also allows you to select one or more URL addresses, and then remove them from the history file or save them into text, HTML or XML file. In addition, you are allowed to view the visited URL list of other user profiles on your computer, and even access the visited URL list on a remote computer, as long as you have permission to access the history folder.