Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Profile: modules/browser/edge.toml

Source

  • Original path: profiles/modules/browser/edge.toml

Profile (TOML)

# Edge Browser Artifacts Module
# Collects Microsoft Edge browser artifacts

[module]
name = "Edge Browser Artifacts"
description = "Microsoft Edge history, cookies, and WebCache"
category = "browser"
platform = ["windows"]
priority = "high"

decode = ["base64", "percent-encoding"]

# Edge History
[[patterns]]
  name = "Edge History"
  pattern = "Edge.*History"
  case-insensitive = true
  type = "regex"

# Edge Cookies
[[patterns]]
  name = "Edge Cookies"
  pattern = "Edge.*Cookies"
  case-insensitive = true
  type = "regex"

# Edge WebCache
[[patterns]]
  name = "Edge WebCache"
  pattern = "WebCacheV\\d+\\.dat"
  case-insensitive = true
  type = "regex"

# Edge Bookmarks
[[patterns]]
  name = "Edge Bookmarks"
  pattern = "Edge.*Bookmarks"
  case-insensitive = true
  type = "regex"

# Edge Login Data
[[patterns]]
  name = "Edge Login Data"
  pattern = "Edge.*Login Data"
  case-insensitive = true
  type = "regex"