ChromeOS | Chrome Browser History Extraction

[cmaponte]

SOC analyst here. Working for a public school system. Custom admin role. 

We are having a hard time attempting to extract ChromeOS web history from a student's chromebook in the event of a security incident. Wanted to reach out to the community and see if anyone has ideas? Unfortunately we do not have super admin priveledges nor can they be granted so we are driving a bit blind off of youtube videos and google searches. We are looking to not boot into developer mode and hopefully not an extension. We have tested Crowdstrike/Google connector which has very limited log visibility. Thank you

[StephenHind]

@cmaponte it's simply not possible: when you use Chrome with a Google Workspace account the Web History is not recorded anywhere in Google Workspace; you can't even sync the web history across devices.

Apparently this is by design, done so on purpose, so you won't be able to access it unless you sit at that Chromebook and the student hasn't deleted the web history (or destroyed the Chromebook).  It's not even an option if you pay for Chrome Enterprise Premium.