Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Profile: modules/browser/chrome.toml

Source

  • Original path: profiles/modules/browser/chrome.toml

Profile (TOML)

# Chrome/Chromium Browser Artifacts Module
# Collects Chrome and Chromium-based browser artifacts

[module]
name = "Chrome Browser Artifacts"
description = "Chrome/Chromium history, cookies, login data, bookmarks, and cache"
category = "browser"
platform = ["windows", "linux", "macos"]
priority = "high"

decode = ["base64", "percent-encoding"]

# Chrome History
[[patterns]]
  name = "Chrome History Database"
  pattern = "(?:Chrome|Chromium).*History"
  case-insensitive = true
  type = "regex"

# Chrome Login Data (saved passwords)
[[patterns]]
  name = "Chrome Login Data"
  pattern = "(?:Chrome|Chromium).*Login Data"
  case-insensitive = true
  type = "regex"

# Chrome Cookies
[[patterns]]
  name = "Chrome Cookies"
  pattern = "(?:Chrome|Chromium).*Cookies"
  case-insensitive = true
  type = "regex"

# Chrome Web Data (autofill, credit cards)
[[patterns]]
  name = "Chrome Web Data"
  pattern = "(?:Chrome|Chromium).*Web Data"
  case-insensitive = true
  type = "regex"

# Chrome Bookmarks
[[patterns]]
  name = "Chrome Bookmarks"
  pattern = "(?:Chrome|Chromium).*Bookmarks"
  case-insensitive = true
  type = "regex"

# Chrome Extensions
[[patterns]]
  name = "Chrome Extensions"
  pattern = "(?:Chrome|Chromium).*Extensions"
  case-insensitive = true
  type = "regex"

# Chrome Cache
[[patterns]]
  name = "Chrome Cache"
  pattern = "(?:Chrome|Chromium).*Cache"
  case-insensitive = true
  type = "regex"

# Chrome Download History
[[patterns]]
  name = "Chrome Downloads"
  pattern = "(?:Chrome|Chromium).*Downloads"
  case-insensitive = true
  type = "regex"

# Chrome Preferences
[[patterns]]
  name = "Chrome Preferences"
  pattern = "(?:Chrome|Chromium).*Preferences"
  case-insensitive = true
  type = "regex"

# Chrome Top Sites
[[patterns]]
  name = "Chrome Top Sites"
  pattern = "(?:Chrome|Chromium).*Top Sites"
  case-insensitive = true
  type = "regex"