1

Hello how can I obtain the modified files by Google Chrome. For example, if one web application accesses and modifies the one local file in the user's directory how can I find out?

kkk001
  • 31
  • 2
  • Do you mean the google docs or like cache and setting for for the actual chrome browser? – Jason Croyle Mar 05 '21 at 23:30
  • No I am talking about local user files. For example, web applications can use local file system API to access user's local files if such event is happened how can I obtain whether the web application accessed the user's local files? – kkk001 Mar 05 '21 at 23:31
  • [Auditing](https://linux.die.net/man/8/auditctl) may help. The problem is finding out whether a file write was initiated by the browser. You can filter audit records by PID, but if the browser uses a new process to update files, it's difficult. – berndbausch Mar 06 '21 at 01:21
  • You could use `inotifywait` as well - plenty of examples on the net – Artem S. Tashkinov Mar 06 '21 at 09:21

0 Answers0