firefox.cookies

$ target-query <path/to/target> -f firefox.cookies

Details

Module	dissect.target.plugins.apps.browser.firefox.FirefoxPlugin
Output	records

Module documentation

Firefox browser plugin.

Function documentation

Return browser cookie records from Firefox.

Args:

browser_name: The name of the browser as a string.

Yields:

Records with the following fields:
    ts_created (datetime): Cookie created timestamp.
    ts_last_accessed (datetime): Cookie last accessed timestamp.
    browser (string): The browser from which the records are generated from.
    name (string): The cookie name.
    value (string): The cookie value.
    host (string): Cookie host key.
    path (string): Cookie path.
    expiry (varint): Cookie expiry.
    is_secure (bool): Cookie secury flag.
    is_http_only (bool): Cookie http only flag.
    same_site (bool): Cookie same site flag.