Evidence: Chromium Web Storage
Description: Collect Chromium Web Storage
Category: Applications
Platform: linux
Short Name: chws
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
Browser web storage includes both local and session storage used by websites to store client-side data. This data can contain application state, user preferences, cached content, and potentially sensitive information.
Data Collected
This collector gathers structured data about chromium web storage.
Collection Method
This collector extracts web storage data from browser storage locations including local storage and session storage.
Forensic Value
Web storage analysis reveals cached application data, stored credentials, session information, and potential data exfiltration staging. Analysts can identify malicious website activity, stored authentication tokens, tracking identifiers, and sensitive data cached by compromised web applications.
