DFIRHub

PrismaAccessBrowser

Prisma Access Browser

  • Browsers
  • 43 paths
  • Per-user data
  • Version 1.1
  • Cassie Doemel and Andrew Rathbun, Yogesh Khatri

Paths on disk

43 paths

Paths use Windows environment variable syntax

Notes

The SQLite database(s) this Target collects can be parsed with SQLECmd using the following map(s): https://github.com/EricZimmerman/SQLECmd/blob/master/SQLMap/Maps/Windows_ChromiumBrowser_HistoryVisits.smap

For the files that aren't JSON or SQlite, aka Current Session, Current Tabs, Last Tabs, Last Session, see above links for clues on how to interpret that data

References

1 link