Splunk Search

How to get Chrome extension list of a user?

10061987
Engager

Hi all,

Hope you are well. I have a task about getting users'Chrome extension list with Splunk Search with queries. I couldn't figure out how can i do this. I am new on Splunk and sometimes i can ask too much questions to the community. Sorry about this.

Thanks in advance.

Best Regards.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If you are somehow indexing each user's Chrome extensions then, yes, you can search them.  Splunk cannot, however, reach out to individual user computers to query them for installed software and plug-ins.  The computers would have run a script or program that collects the desired information and forwards it to Splunk.

---
If this reply helps you, Karma would be appreciated.
0 Karma

10061987
Engager

I supposed i can find these by searching file creation event logs. You know when a user installed an extension that extension will be installed on computer but i don't know what is the exact query for this

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You'd have to inquire on a Chrome forum about the specifics of detecting when an extension is installed.  Then ensure Splunk is monitoring the appropriate file/directory.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...