From a0a2a1db620664ead8ff789397ac282498e95ca3 Mon Sep 17 00:00:00 2001
From: Phill Moore <randomaccess3@gmail.com>
Date: Tue, 16 Apr 2024 20:10:47 +1000
Subject: [PATCH] Update Chrome.tkape

add snapshots
---
 Targets/Browsers/Chrome.tkape | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Targets/Browsers/Chrome.tkape b/Targets/Browsers/Chrome.tkape
index ec17d8dad..0bb51d77f 100644
--- a/Targets/Browsers/Chrome.tkape
+++ b/Targets/Browsers/Chrome.tkape
@@ -201,6 +201,12 @@ Targets:
         Path: C:\Users\%user%\AppData\Roaming\Microsoft\Protect\*\
         Recursive: true
         Comment: "Required for offline decryption"
+    -
+        Name: Chrome Snapshots Folder
+        Category: Communications
+        Path: C:\Users\%user%\AppData\Local\Google\Chrome\User Data\Snapshots\*\
+        Recursive: true
+        Comment: "Grabs folder that appears to have snapshots of Chrome SQLite DBs organized by version #."
 
 # Documentation
 # https://nasbench.medium.com/web-browsers-forensics-7e99940c579a