Brave Favicons

Overview

Evidence: Brave Favicons Description: Collect Brave Favicons Category: Browser Platform: Linux Short Name: bfico Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Favicons database contains icon mappings for visited sites and can support URL attribution and recognition.

Data Collected

This collector gathers structured data about favicons.

Brave Favicons Data

Field	Description	Example
ID	Primary key (auto-increment)	1
URL	Website URL	https://example.com
IconURL	Favicon URL	https://example.com/favicon.ico
IconType	Type/format	PNG
FaviconsPath	Source database path	/home/user/.config/BraveSoftware/Brave-Browser/Default/Favicons

Collection Method

This collector parses the necessary data from the browser_favicons table.

Usage

Use icons for quick visual identification and correlation across datasets.

Notes

Icon entries may not be unique per URL; validate with page URL and last visit time.