List of Chrome Extensions

kpingul · January 25, 2024, 10:48pm

I’m looking to compile a list of installed chrome extensions across workstations. Is there an SQL query that can accomplish this?

Thanks, and much appreciated!

sgroeneveld · January 29, 2024, 10:52am

Negative on this front according to me (hope I will be wrong).
Using OSQuery for this specifically

iboje · February 20, 2024, 3:28pm

This is something that Velociraptor could do for you using the Generic.Forensic.SQLiteHunter artifact. Velociraptor is built-in to IDR if you have the Ultimate license (or you spin up your own instance of the free version).

sgroeneveld · February 22, 2024, 8:52am

Yeah but not working if you are also dealing with Macs. Best is of course to harden Chrome and not allow extensions besides that company approved ones.