sites they visit, credit cards they use, etc.) and its extension configuration should be regularly audited to ensure that they are not at risk of attack.įirefox addon installations are cataloged and tracked to facilitate a number of potential purposes, for example: Kolide meticulously documents every piece of data returnedġPassword extension (desktop app required)ĭue to the high-value of a user's browser activity, Mozilla Firefox is a frequent target of malware authors who wish to obtain secure details about an end-user (eg. Store this data in Inventory for your team to view, query, or Once collected, Kolide will parse, clean up, and centrally To efficiently collect Firefox Add-ons from Kolide's endpoint agent bundles in osquery What Firefox Add-on Data Can Kolide Collect? Kolide collects metadata about Mozilla Firefox addons such as their name, their publisher, their version, and whether they are enabled. Firefox Screenshots, Form Autofill, Google Search, Wikipedia, etc.).įirefox addons are installed on a per-profile basis and can be enabled or disabled while remaining installed.įirefox Addons can do, among other things:Įxtend the functionality of Mozilla Firefox (such as integrating with installed apps like 1Password)Ĭustomize the appearance of Mozilla Firefox through the installation of 'Theme' extensions Addons may be published by Mozilla or by 3rd party authors, and can be distributed either through the Mozilla Firefox Addons or via manual download and installation.Ī small subset of extensions are installed by default by Firefox (eg. Mozilla Firefox provides the ability to extend the core functionality of the browser via the installation of 'addons'.

Mozilla firefox add ons