Brave Sessions

Overview

Evidence: Brave Sessions Description: Collect Brave Sessions Category: Browser Platform: Linux Short Name: brvss Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): Yes

Background

Session files record open tabs/windows across restarts, providing context around user activity.

Data Collected

This collector gathers structured data about session files.

Brave Sessions Data

Field	Description	Example
ID	Primary key (auto-increment)	1
FilePath	Session file path	/home/user/.config/BraveSoftware/Brave-Browser/Default/Sessions/Session_123
Profile	Browser profile	Default
Timestamp	File timestamp	2023-10-15 14:30:25

Collection Method

This collector parses the necessary data from the browser_sessions table.

Usage

Reconstruct context and correlate with browsing and downloads.

Notes

Raw files are collected for deeper analysis.