Splunk Search

How to get Chrome extension list of a user?

10061987
Engager

Hi all,

Hope you are well. I have a task about getting users'Chrome extension list with Splunk Search with queries. I couldn't figure out how can i do this. I am new on Splunk and sometimes i can ask too much questions to the community. Sorry about this.

Thanks in advance.

Best Regards.

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If you are somehow indexing each user's Chrome extensions then, yes, you can search them.  Splunk cannot, however, reach out to individual user computers to query them for installed software and plug-ins.  The computers would have run a script or program that collects the desired information and forwards it to Splunk.

---
If this reply helps you, Karma would be appreciated.
0 Karma

10061987
Engager

I supposed i can find these by searching file creation event logs. You know when a user installed an extension that extension will be installed on computer but i don't know what is the exact query for this

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You'd have to inquire on a Chrome forum about the specifics of detecting when an extension is installed.  Then ensure Splunk is monitoring the appropriate file/directory.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...