Skip to content

Brave: unexpected keyword argument 'parsed_artifacts' #233

Description

@OMEGARAZER

Describe the problem
When attempting to run against Brave the script fails with the exception TypeError("Chrome.__init__() got an unexpected keyword argument 'parsed_artifacts'")

Screenshots or Console Output
Image

Expected behavior
Normal parsing of browser artifacts.

To Reproduce
Steps to reproduce the behavior:

  1. Run Hindsight
  2. Attempt to load Brave profile
  3. See error

hindsight.log Snippet

################################################################################
###  Hindsight v2025.03 (https://github.com/obsidianforensics/hindsight)  ###
################################################################################
2026-01-04 11:35:51.627 | D | Options: {'input_path': 'D:\\Hindsight\\Brave Jan\\User Data\\', 'profile_paths': ['D:\\Hindsight\\Brave Jan\\User Data\\Default'], 'cache_path': '', 'browser_type': 'Brave', 'available_input_types': ['Chrome', 'Brave'], 'version': [], 'display_version': None, 'output_name': 'Hindsight Report (2026-01-04T11-33-20)', 'log_path': 'hindsight.log', 'no_copy': False, 'temp_dir': 'hindsight-temp', 'timezone': <DstTzInfo 'America/New_York' LMT-1 day, 19:04:00 STD>, 'available_output_formats': ['sqlite', 'jsonl', 'xlsx'], 'selected_output_format': 'xlsx', 'available_decrypts': {'windows': 0, 'mac': 0, 'linux': 0}, 'selected_decrypts': None, 'parsed_artifacts': [], 'artifacts_display': None, 'artifacts_counts': {}, 'parsed_storage': [], 'parsed_extension_data': [], 'plugin_descriptions': [{'file_name': 'chrome_extensions', 'friendly_name': 'Chrome Extension Names', 'version': '20240428', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'generic_timestamps', 'friendly_name': 'Generic Timestamp Decoder', 'version': '20240428', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'google_analytics', 'friendly_name': 'Google Analytics Cookie Parser', 'version': '20170130', 'error': 'other', 'error_msg': AttributeError("'NoneType' object has no attribute 'parsed_artifacts'"), 'parent_path': None}, {'file_name': 'google_searches', 'friendly_name': 'Google Searches', 'version': '20160912', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'load_balancer_cookies', 'friendly_name': 'Load Balancer Cookie Decoder', 'version': '20200213', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'quantcast_cookies', 'friendly_name': 'Quantcast Cookie Parser', 'version': '20160907', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'query_string_parser', 'friendly_name': 'Query String Parser', 'version': '20170225', 'error': 'other', 'error_msg': AttributeError("'NoneType' object has no attribute 'parsed_artifacts'"), 'parent_path': None}, {'file_name': 'time_discrepancy_finder', 'friendly_name': 'Time Discrepancy Finder', 'version': '20170129', 'error': None, 'error_msg': None, 'parent_path': None}], 'selected_plugins': ['generic_timestamps', 'google_analytics', 'google_searches', 'load_balancer_cookies', 'quantcast_cookies', 'query_string_parser', 'time_discrepancy_finder'], 'plugin_results': {}, 'hindsight_version': '2025.03', 'preferences': [], 'fatal_error': None, 'plugins_info': [{'file_name': 'chrome_extensions', 'friendly_name': 'Chrome Extension Names', 'version': '20240428', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'generic_timestamps', 'friendly_name': 'Generic Timestamp Decoder', 'version': '20240428', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'google_analytics', 'friendly_name': 'Google Analytics Cookie Parser', 'version': '20170130', 'error': 'other', 'error_msg': AttributeError("'NoneType' object has no attribute 'parsed_artifacts'"), 'parent_path': None}, {'file_name': 'google_searches', 'friendly_name': 'Google Searches', 'version': '20160912', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'load_balancer_cookies', 'friendly_name': 'Load Balancer Cookie Decoder', 'version': '20200213', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'quantcast_cookies', 'friendly_name': 'Quantcast Cookie Parser', 'version': '20160907', 'error': None, 'error_msg': None, 'parent_path': None}, {'file_name': 'query_string_parser', 'friendly_name': 'Query String Parser', 'version': '20170225', 'error': 'other', 'error_msg': AttributeError("'NoneType' object has no attribute 'parsed_artifacts'"), 'parent_path': None}, {'file_name': 'time_discrepancy_finder', 'friendly_name': 'Time Discrepancy Finder', 'version': '20170129', 'error': None, 'error_msg': None, 'parent_path': None}]}
2026-01-04 11:35:51.627 | I | Starting analysis
2026-01-04 11:35:51.627 | I | Reading files from D:\Hindsight\Brave Jan\User Data\
2026-01-04 11:35:51.627 | D | Input directory contents: ['BrowserMetrics-spare.pma', 'First Run', 'Last Browser', 'Last Version', 'Local State', 'Variations', 'adcocjohghhfpidemphmcmlmhnfgikei', 'afalakplffnnnlkncjhbmahjfjhmlkal', 'AmountExtractionHeuristicRegexes', 'aoojcmojmmcbpfgoecoadbdpnagfchel', 'bfpgedeaaibpoidldhjcknekahbikncb', 'cdbbhgbmjhfnhnmgeddbliobbofkgdhe', 'CertificateRevocation', 'component_crx_cache', 'cpoalefficncklhjfpglfiplenlpccdb', 'Crashpad', 'Crowd Deny', 'Default', 'extensions_crx_cache', 'FileTypePolicies', 'gkboaolpopklhgplhaaiboijnklogmbc', 'GraphiteDawnCache', 'GrShaderCache', 'heplpbhjcbmiibdlchlanmdenffpiibo', 'hyphen-data', 'iodkpdagapdfkphljnddpjlldadblomo', 'jcfckfokjmopfomnoebdkdhbhcgjfnbi', 'jiacfhmaoegmmahbioiihgpfnjnklmoe', 'kihnoaefogbkmblfimmibknnmkllbhlf', 'lgejdiamednlaeiknhnnjnkofmapfbbf', 'MEIPreload', 'mfddibmblmbccpadfndgakiopmmhebop', 'mhccgcegedfkhdbfbgllfkkcjhgkoinc', 'mjhbdghipcamfoojbeikdojibeelbmil', 'nlpaeekllejnmhoonlpcefpfnpbajbpe', 'omoaeaghhgmiojkeaemjkpkmelmalbgo', 'OnDeviceHeadSuggestModel', 'P3AConfig', 'PKIMetadata', 'Safe Browsing', 'SafetyTips', 'segmentation_platform', 'ShaderCache', 'SSLErrorAssistant', 'tor', 'TpcdMetadata', 'Webstore Downloads', 'WidevineCdm', 'ZxcvbnData']
2026-01-04 11:35:51.627 | W | The profile directory D:\Hindsight\Brave Jan\User Data\ does not contain the file History. Analysis may not be very useful.
2026-01-04 11:35:52.405 | D | Profile paths: ['D:\\Hindsight\\Brave Jan\\User Data\\Default']
2026-01-04 11:35:52.405 | I |  - Found 1 browser profile(s): ['D:\\Hindsight\\Brave Jan\\User Data\\Default']

System Details

  • Analysis System OS (your forensic workstation): Windows 11
  • Method of Running Hindsight: hindsight_gui.exe on Windows
  • Hindsight version: v2025.03
  • Target System OS: Windows 11
  • Target Browser: Brave
  • Target Browser Version: 1.85.118

Metadata

Metadata

Assignees

Labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions