Skip to content

Browser minor additions - #53

Merged
scudette merged 2 commits into
Velocidex:masterfrom
NicknameNotTaken:browser_minor_additions
Sep 14, 2026
Merged

scudette merged 2 commits into
Velocidex:masterfrom
NicknameNotTaken:browser_minor_additions

Conversation

@NicknameNotTaken

Copy link
Copy Markdown
Contributor

Regarding Chromium browsers, a new field exists since v103 (according to https://github.com/RyanDFIR/hindsight/blob/main/pyhindsight/browsers/chrome.py#L933).

For Firefox, PlaceID is added so that "downloads" and "history" can be correlated.

@CLAassistant

CLAassistant commented Sep 14, 2026 •

Copy link
Copy Markdown

CLA assistant check
All committers have signed the CLA.

@scudette
scudette merged commit 8ccba53 into Velocidex:master Sep 14, 2026
5 checks passed
scudette pushed a commit that referenced this pull request Sep 21, 2026
…ot User Paths for Linux, Add PlaceID to Firefox_HistoryLegacy (#54)

The Linux path did not take into consideration Firefox Developer edition
which uses the format qbtxwtsi.dev-edition-default rather than
qbtxwtsi.default-release like the standard version.

On Fedora the path for Firefox installed from dnf package manager was
observed to be /home/user/.config/mozilla/firefox/profile/ which was not
accounted for.

Only normal users were covered by the globs and I validated that both
Chromium and Firefox browsers can run as the root user and I have
observed this behaviour on real life cases as well so makes sense to
cover these like the SYSTEM user in Windows for example.

I also noticed that on #53 the PlaceID change was not made to the
Firefox_HistoryLegacy.yaml file so I replicated the changes over so that
everything is mirrored.

These were quick things I noticed that should improve the coverage a
bit. Will be doing more deeper research over time.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants