Chromium Login Data

Overview

Evidence: Chromium Login Data Description: Collect Chromium Login Data Category: Browser Platform: Cross-platform Short Name: chmlgd Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

This collector gathers chromium login data information from the system. This data is essential for forensic investigations and incident response.

Data Collected

This collector gathers structured data about chromium login data.

Chromium Login Data Data

Field	Description	Example
ID	ID	1
UserName	User Name	Example Name
BrowserName	Browser Name	Example Name
OriginURL	Origin URL	Example value
SignonRealm	Signon Realm	Example value
BlacklistedByUser	Blacklisted By User	Example value
Scheme	Scheme	Example value
PasswordType	Password Type	Example value
TimesUsed	Times Used	2023-10-15 14:30:25
Profile	Profile	Example value
Path	Path	/path/to/file
DateCreated	Date Created	2023-10-15 14:30:25
DateLastUsed	Date Last Used	2023-10-15 14:30:25

Collection Method

This collector queries the chmlgd table via osquery and parses the results into structured data.

Usage

This evidence is crucial for forensic investigations as it provides insights into system activity, user behavior, and potential security incidents.

Notes

This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.