Profile: targets/KAPE_BrowserHistory.toml

• Source
• Profile (TOML)

Source

• Original path: profiles/targets/KAPE_BrowserHistory.toml

Profile (TOML)

# KAPE Browser History Target
# Collects all browser history and artifacts

[target]
name = "KAPE_BrowserHistory"
description = "Comprehensive browser artifact collection (all browsers)"
category = "browser"
priority = "high"

# All browser modules
modules = [
  "browser/all-browsers"
]

# Additional browser-related patterns
[[patterns]]
  name = "Browser Process"
  pattern = "(?:chrome|firefox|edge|safari|iexplore)\\.exe"
  case-insensitive = true
  type = "regex"

[[patterns]]
  name = "Browser Extension"
  pattern = "(?:crx|xpi)$"
  case-insensitive = true
  type = "regex"

[[signatures]]
  name = "Browser Activity Summary"
  query = "SELECT COUNT(DISTINCT sha256) as files_with_browser_artifacts FROM pattern_matches WHERE pattern_name LIKE '%Browser%' OR pattern_name LIKE '%Chrome%' OR pattern_name LIKE '%Firefox%'"