DFIRHub

ChromeSxS

Chrome SxS - Canary

  • Browsers
  • 47 paths
  • Per-user data
  • Version 1
  • Eric Zimmerman, Andrew Rathbun, Hernan Filannino, Reece394

Paths on disk

47 paths

Paths use Windows environment variable syntax

Notes

The SQLite database(s) this Target collects can be parsed with SQLECmd using the following map(s): https://github.com/EricZimmerman/SQLECmd/blob/master/SQLMap/Maps/Windows_Chrome_History.smap

For the files that aren't JSON or SQlite, aka Current Session, Current Tabs, Last Tabs, Last Session, see above links for clues on how to interpret that data

References

10 links