Have any of you guys come across this browser ? We are noticing a lot of cyber criminals using this browser and I was surprised that Axiom wasn't looking at this browser and the artefacts that can be got from it. I was wondering if anyone else has come across it .. I would assume that we should be able to parse the following
-
Kameleo stores browser profiles somewhere on disk. AppData\local\Programs\kameleo\workspace\...........\browser\default\history
-
These folders should contain:
-
Modified browser preferences (
Preferencesfile in Chromium) -
Cookies databases (
CookiesSQLite DB) -
Local storage, IndexedDB
-
Extensions (e.g., Kameleo’s control extension)
-
Cache and History
-

