Chromium User Profiles

Overview

Evidence: Chromium User Profiles Description: Collect Chromium User Profiles Category: Applications Platform: linux Short Name: chprfls Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Browser user profiles store per-user browser configurations, extensions, settings, and data segregation. This data reveals multiple user accounts, profile switching patterns, and user-specific browsing behavior.

Data Collected

This collector gathers structured data about chromium user profiles.

Collection Method

This collector enumerates browser user profiles and extracts profile metadata, configurations, and associated data paths.

Forensic Value

Profile analysis identifies multiple user accounts, profile-specific extensions and configurations, shared device usage patterns, and potential privilege escalation or lateral movement using different browser profiles. Investigators can correlate activity across profiles and identify unauthorized profile creation.