Edge Local Storage

Overview

Evidence: Edge Local Storage Description: Collect Edge Local Storage Category: Browser Platform: Cross-platform Short Name: els Is Parsed: Yes Sent to Investigation Hub: Yes Collect File(s): No

Background

This collector gathers edge local storage information from the system. This data is essential for forensic investigations and incident response.

Data Collected

This collector gathers structured data about edge local storage.

Edge Local Storage Data

Field	Description	Example
ID	ID	1
UserName	User Name	Example Name
ProfileName	Profile Name	Example Name
BrowserName	Browser Name	Example Name
Key	Key	Example value
Value	Value	Example value
Path	Path	/path/to/file

Collection Method

This collector queries the els table via osquery and parses the results into structured data.

Usage

This evidence is crucial for forensic investigations as it provides insights into system activity, user behavior, and potential security incidents.

Notes

This data may contain sensitive information that should be handled according to data protection requirements. Ensure proper chain of custody is maintained during collection and analysis.