hindsight_processing_input.json

{
  "$schema": "https://json-schema.org/draft-07/schema",
  "type": "object",
  "properties": {
    "working_directory_path": {
      "type": "string",
      "format": "localFilePath",
      "title": "Working Directory Path",
      "description": "Absolute path to the directory where Hindsight output artifacts will be stored."
    },
    "hindsight_executable_path": {
      "type": "string",
      "format": "localFilePath",
      "title": "Hindsight Executable Path",
      "description": "Absolute path to the hindsight.exe binary on the target endpoint."
    },
    "output_format": {
      "type": "string",
      "enum": ["xlsx", "sqlite", "jsonl"],
      "title": "Output Format",
      "description": "File format for Hindsight forensic output (xlsx for Excel, sqlite for database, jsonl for JSON lines)."
    },
    "target_browser": {
      "type": "string",
      "enum": ["Google Chrome", "Microsoft Edge", "Brave"],
      "title": "Target Browser",
      "description": "Name of the Chromium-based browser to collect forensic data from."
    },
    "target_hostname": {
      "type": "string",
      "title": "Target Hostname",
      "description": "Hostname of the endpoint system, used for naming output artifacts."
    },
    "target_username": {
      "type": "string",
      "title": "Target Username",
      "description": "Windows username whose browser profile to analyze. If empty, auto-discovers the currently logged-in user."
    }
  },
  "required": ["working_directory_path", "hindsight_executable_path", "output_format", "target_browser", "target_hostname"]
}