Evidence: Chromium Favicons
Description: Collect Chromium Favicons
Category: Applications
Platform: linux
Short Name: chfico
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Browser favicons are cached website icons that provide visual history of visited sites. This data supplements browsing history by revealing sites accessed even if history was deleted.
Data Collected
This collector gathers structured data about chromium favicons.
Collection Method
This collector queries the browser's Favicons database to extract cached website icons and associated URLs.
Forensic Value
Favicon analysis can recover evidence of deleted browsing history, identify visited sites through icon fingerprinting, and correlate with other browser artifacts to establish comprehensive activity timelines.
