I'm investigating a security incident. I went to review a user's browser history in Firefox (52.1.1 ESR) and saw a link to an avast! website malware detection page in the history. I double-clicked the event, which displayed the page, as expected. It also placed the page at the top (most recent) of the history, also as expected. However, the earlier history event, the one I double-clicked, was deleted from the history at the same time. I did not expect this. Does this seem like ordinary behavior?
Thanks.
