Browser

Brave Profile Stores

Brave profile directories can contain saved passwords, cookies, local encryption state, autofill data, payment data, and session artifacts.

Metadata

id: browser.brave.profile-stores
category: browser
sensitivity: critical
subcategory: brave
artifact types: password-store, cookie, session, configuration
tags: browser, brave, credentials, cookies

Path Matchers

Path	Kind	Platforms
`%LOCALAPPDATA%\BraveSoftware\Brave-Browser\User Data\`	`directory`	`windows`
`$HOME/.config/BraveSoftware/Brave-Browser/`	`directory`	`linux`
`$HOME/Library/Application Support/BraveSoftware/Brave-Browser/`	`directory`	`macos`

Credential Types

saved-password
session-cookie

Impact

credential_access

References

Telegram Desktop tdata

Telegram Desktop tdata directories can contain encrypted local session and account artifacts.

Chrome Cookie Stores

Browser cookie stores can contain session cookies and authentication state.

On this page

Metadata Path Matchers Credential Types Impact References