Chromium Favicons

Overview

Evidence: Chromium Favicons Description: Collect Chromium Favicons Category: Applications Platform: linux Short Name: chfico Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Browser favicons are cached website icons that provide visual history of visited sites. This data supplements browsing history by revealing sites accessed even if history was deleted.

Data Collected

This collector gathers structured data about chromium favicons.

Collection Method

This collector queries the browser's Favicons database to extract cached website icons and associated URLs.

Forensic Value

Favicon analysis can recover evidence of deleted browsing history, identify visited sites through icon fingerprinting, and correlate with other browser artifacts to establish comprehensive activity timelines.