Chromium Browsing History
Overview
Section titled “Overview”Evidence: Chromium Browsing History
Description: Collect visited URLs from Chromium
Category: Applications
Platform: linux
Short Name: cmhst
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Section titled “Background”Browser history records all websites visited by users, including URLs, page titles, visit timestamps, visit counts, and transition types. This data is essential for reconstructing user activity, identifying malicious websites, and tracking lateral movement or reconnaissance activities.
Data Collected
Section titled “Data Collected”This collector gathers structured data about chromium browsing history.
Collection Method
Section titled “Collection Method”This collector queries the browser’s History database to extract visited URLs, timestamps, referrer information, and user interaction patterns.
Forensic Value
Section titled “Forensic Value”Browsing history reveals phishing sites, malicious domains, command-and-control servers, data exfiltration targets, and reconnaissance activities. Analysts can identify compromised credentials, track attacker infrastructure, and correlate web activity with other security events to establish attack timelines.