Brave Downloads

Overview

Evidence: Brave Downloads Description: Collect Brave Downloads Category: Browser Platform: Linux Short Name: bdwnlds Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Brave downloads include file paths, times, and referrers, enabling analysis of file ingress events.

Data Collected

This collector gathers structured data about downloads.

Brave Downloads Data

Field	Description	Example
ID	Primary key (auto-increment)	1
CurrentPath	Temporary/current path	/home/user/Downloads/file.exe
TargetPath	Final target path	/home/user/Downloads/file.exe
StartTime	Download start time	2023-10-15 14:30:25
EndTime	Download finish time	2023-10-15 14:31:10
DangerType	Browser risk classification	0
Opened	Opened after download	0
Referrer	Referrer URL	https://example.com
URL	Download URL	https://example.com/file.exe
HistoryFilePath	Source database path	/home/user/.config/BraveSoftware/Brave-Browser/Default/History

Collection Method

This collector parses the necessary data from the browser_downloads table.

Usage

Correlate with other evidence to determine delivery mechanisms and user interaction.

Notes

Executables may be modified by security tools; verify on disk.