Brave Login Data

Overview

Evidence: Brave Login Data Description: Collect Brave Login Data Category: Browser Platform: Linux Short Name: blgd Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Saved credentials can indicate account usage and potential credential exposure.

Data Collected

This collector gathers structured data about saved logins.

Brave Login Data

Field	Description	Example
ID	Primary key (auto-increment)	1
OriginURL	Website origin	https://example.com
ActionURL	Form action URL	https://example.com/login
Username	Username (decrypted if available)	[email protected]
Password	Password (masked or decrypted if available)	********
DateCreated	Entry creation time	2023-10-15 14:30:25
TimesUsed	Number of times used	3
LoginDataPath	Source database path	/home/user/.config/BraveSoftware/Brave-Browser/Default/Login Data

Collection Method

This collector parses the necessary data from the browser_login_data table.

Usage

Identify compromised accounts and correlate with browsing activity.

Notes

Handling decrypted secrets requires strict controls.