Merge pull request #973 from SolitudePy/master

Added LocalSystem chrome history
EricZimmerman · Sep 27, 2024 · 7fe3e9c · 7fe3e9c
2 parents 322839d + 8528f58
commit 7fe3e9c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/Targets/Browsers/Chrome.tkape b/Targets/Browsers/Chrome.tkape
@@ -207,6 +207,11 @@ Targets:
         Path: C:\Users\%user%\AppData\Local\Google\Chrome\User Data\Snapshots\*\
         Recursive: true
         Comment: "Grabs folder that appears to have snapshots of Chrome SQLite DBs organized by version #."
+    -
+        Name: SYSTEM Chrome History
+        Category: Communications
+        Path: C:\Windows\system32\config\systemprofile\AppData\Local\Google\Chrome\User Data\*\
+        FileMask: History*
 
 # Documentation
 # https://nasbench.medium.com/web-browsers-forensics-7e99940c579a