chromium_parse_session_storage_tool
Parse Chromium session storage records from a browser profile to retrieve session data for forensic analysis.
Instructions
Parse Chromium Session Storage records from a browser profile. Typical profile path: "C:\Users<user>\AppData\Local\Google\Chrome\User Data\Default".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| key | No | Optional exact Session Storage key filter | |
| host | No | Optional exact host filter | |
| limit | No | Maximum number of records to return | |
| profile_path | Yes | Absolute path to the Chromium profile directory | |
| include_deletions | No | Include recovered deletion records when available |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||