- Original path:
profiles/modules/browser/chrome.toml
# Chrome/Chromium Browser Artifacts Module
# Collects Chrome and Chromium-based browser artifacts
[module]
name = "Chrome Browser Artifacts"
description = "Chrome/Chromium history, cookies, login data, bookmarks, and cache"
category = "browser"
platform = ["windows", "linux", "macos"]
priority = "high"
decode = ["base64", "percent-encoding"]
# Chrome History
[[patterns]]
name = "Chrome History Database"
pattern = "(?:Chrome|Chromium).*History"
case-insensitive = true
type = "regex"
# Chrome Login Data (saved passwords)
[[patterns]]
name = "Chrome Login Data"
pattern = "(?:Chrome|Chromium).*Login Data"
case-insensitive = true
type = "regex"
# Chrome Cookies
[[patterns]]
name = "Chrome Cookies"
pattern = "(?:Chrome|Chromium).*Cookies"
case-insensitive = true
type = "regex"
# Chrome Web Data (autofill, credit cards)
[[patterns]]
name = "Chrome Web Data"
pattern = "(?:Chrome|Chromium).*Web Data"
case-insensitive = true
type = "regex"
# Chrome Bookmarks
[[patterns]]
name = "Chrome Bookmarks"
pattern = "(?:Chrome|Chromium).*Bookmarks"
case-insensitive = true
type = "regex"
# Chrome Extensions
[[patterns]]
name = "Chrome Extensions"
pattern = "(?:Chrome|Chromium).*Extensions"
case-insensitive = true
type = "regex"
# Chrome Cache
[[patterns]]
name = "Chrome Cache"
pattern = "(?:Chrome|Chromium).*Cache"
case-insensitive = true
type = "regex"
# Chrome Download History
[[patterns]]
name = "Chrome Downloads"
pattern = "(?:Chrome|Chromium).*Downloads"
case-insensitive = true
type = "regex"
# Chrome Preferences
[[patterns]]
name = "Chrome Preferences"
pattern = "(?:Chrome|Chromium).*Preferences"
case-insensitive = true
type = "regex"
# Chrome Top Sites
[[patterns]]
name = "Chrome Top Sites"
pattern = "(?:Chrome|Chromium).*Top Sites"
case-insensitive = true
type = "regex"