Brave Cookies

Overview

Evidence: Brave Cookies Description: Collect Brave Cookies Category: Browser Platform: Cross-platform Short Name: bcookies Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

This collector gathers brave cookies information from the system. This data is essential for forensic investigations and incident response.

Data Collected

This collector gathers structured data about brave cookies.

Brave Cookies Data

Field	Description	Example
ID	ID	1
UserName	User Name	Example Name
BrowserName	Browser Name	Example Name
ProfileName	Profile Name	Example Name
Domain	Domain	Example value
Name	Name	Example Name
Path	Path	/path/to/file
Value	Value	Example value
IsSecure	Is Secure	Example value
IsHTTPOnly	Is HTTPOnly	Example value
HasExpires	Has Expires	Example value
IsPersistent	Is Persistent	Example value
Priority	Priority	Example value
SameSite	Same Site	Example value
SourcePort	Source Port	Example value
SourceScheme	Source Scheme	Example value
CreationTime	Creation Time	2023-10-15 14:30:25
ExpiresTime	Expires Time	2023-10-15 14:30:25
LastAccessTime	Last Access Time	2023-10-15 14:30:25

Collection Method

This collector queries the bcookies table via osquery and parses the results into structured data.

Usage

This evidence is crucial for forensic investigations as it provides insights into system activity, user behavior, and potential security incidents.

Notes

This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.