Brave Form History

Overview

Evidence: Brave Form History Description: Collect Brave Form History Category: Applications Platform: macos Short Name: bfh Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

Browser form history stores previously entered form data including search queries, usernames, and other input fields. This data reveals user search patterns, account information, and potential data leakage through autofill.

Data Collected

This collector gathers structured data about brave form history.

Brave Form History Data

Field	Description	Example
UserName	User Name	Example value
BrowserName	Browser Name	Example value
Name	Name	Example value
Value	Value	Example value
ValueLower	Value Lower	Example value
Count	Count	123
Profile	Profile	Example value
Path	Path	Example value
DateCreated	Date Created	2023-10-15 14:30:25+03:00
DateLastUsed	Date Last Used	2023-10-15 14:30:25+03:00

Collection Method

This collector queries the browser's form history database to extract saved form field data, search queries, and associated timestamps.

Forensic Value

Form history exposes reconnaissance activities, credential enumeration attempts, search queries revealing attacker intent, and potentially sensitive information entered into web forms. Analysts can identify data exfiltration, account compromise indicators, and targeted search patterns.