Chromium Browsing History

Overview

Evidence: Chromium Browsing History Description: Collect visited URLs from Chromium Category: Applications Platform: linux Short Name: cmhst Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Browser history records all websites visited by users, including URLs, page titles, visit timestamps, visit counts, and transition types. This data is essential for reconstructing user activity, identifying malicious websites, and tracking lateral movement or reconnaissance activities.

Data Collected

This collector gathers structured data about chromium browsing history.

Collection Method

This collector queries the browser's History database to extract visited URLs, timestamps, referrer information, and user interaction patterns.

Forensic Value

Browsing history reveals phishing sites, malicious domains, command-and-control servers, data exfiltration targets, and reconnaissance activities. Analysts can identify compromised credentials, track attacker infrastructure, and correlate web activity with other security events to establish attack timelines.