# Brave Login Data

## Overview

**Evidence:** Brave Login Data\
**Description:** Collect Brave Login Data\
**Category:** Applications\
**Platform:** linux\
**Short Name:** blgd\
**Is Parsed:** Yes\
**Sent to Investigation Hub:** Yes\
**Collect File(s):** No

## Background

Browser login data stores saved passwords and credential information. This data is critical for identifying stored credentials, password reuse patterns, and potential credential theft targets.

## Data Collected

This collector gathers structured data about brave login data.

### Brave Login Data Data

| Field               | Description         | Example                   |
| ------------------- | ------------------- | ------------------------- |
| `ID`                | ID                  | 123                       |
| `UserName`          | User Name           | Example value             |
| `BrowserName`       | Browser Name        | Example value             |
| `OriginURL`         | Origin URL          | Example value             |
| `SignonRealm`       | Signon Realm        | Example value             |
| `BlacklistedByUser` | Blacklisted By User | 123                       |
| `Scheme`            | Scheme              | Example value             |
| `PasswordType`      | Password Type       | Example value             |
| `TimesUsed`         | Times Used          | 123                       |
| `Profile`           | Profile             | Example value             |
| `Path`              | Path                | Example value             |
| `DateCreated`       | Date Created        | 2023-10-15 14:30:25+03:00 |
| `DateLastUsed`      | Date Last Used      | 2023-10-15 14:30:25+03:00 |

## Collection Method

This collector extracts saved credentials from the browser's Login Data database, including URLs, usernames, and encrypted passwords.

## Forensic Value

Login data analysis reveals stored credentials, password reuse across services, targeted accounts, and potential credential harvesting. Investigators can identify compromised accounts, credential theft attempts, and unauthorized access to saved credentials by malware or attackers.