Chromium Sessions

Overview

Evidence: Chromium Sessions Description: Collect Chromium Sessions Category: Browser Platform: Cross-platform Short Name: chmss Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

This collector gathers chromium sessions information from the system. This data is essential for forensic investigations and incident response.

Data Collected

This collector gathers structured data about chromium sessions.

Chromium Sessions Data

Field	Description	Example
ID	ID	1
Active	Active	true
Deleted	Deleted	true
Tabs	Tabs	Example value
BrowserName	Browser Name	Example Name

Collection Method

This collector queries the chmss table via osquery and parses the results into structured data.

Usage

This evidence is crucial for forensic investigations as it provides insights into system activity, user behavior, and potential security incidents.

Notes

This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.