History.db is Safari’s local browser history database. It stores records of visited pages, including URLs, visit times, and related metadata that can help reconstruct browsing activity on a Mac or other Apple device.
In cyber security, History.db matters because it is a useful forensic artifact. Investigators can correlate it with cache files, downloads, and network telemetry to build a more reliable timeline of user activity. It can also show where a browser session went, even if tabs are closed or the browser cache is limited. In attacks, history databases may be reviewed to confirm phishing visits, delivery of malicious content, or signs that an intruder used a browser. Defenders should treat it as evidence of activity, not proof of intent, and interpret it alongside other endpoint traces.